Skip to main content
A variable is a value that you can use in any service in Agent Vault, whichever access bundle the service is in. You define the variable once and give it a key, such as GITHUB_TOKEN. Then, any service can use the variable by referencing the key within double braces: {{GITHUB_TOKEN}}. When an agent sends a request, the proxy replaces each reference with the variable’s value.
Only Agent Vault admins can view and update variables. If you’re a member, Variables doesn’t appear in the Agent Vault sidebar.

​
Add a variable

To add a variable:
1
In Agent Vault, go to Variables.
The Variables page with no variables and an Add Variable button
2
Select Add Variable.
The Add Variable dialog with GITHUB_TOKEN as the key and a hidden value
3
Enter a Key and a Value. To view the value later, select the eye icon next to it. Each time someone views or copies a value, Infisical adds an event to the audit log.
A key can be up to 64 characters long. It must start with a letter and use only uppercase letters, numbers, and underscores. No two variables can have the same key.
4
Select Add Variable. The variable appears in the list on the Variables page.
The Variables page listing seven variables with hidden values. The Used By column shows access bundle badges, such as code-review, on-call, and release-notes for GITHUB_TOKEN, with a tooltip listing the github service in code-review. SLACK_BOT_TOKEN shows three badges and +1 for one more access bundle. SENTRY_AUTH_TOKEN shows Unused.
Agent Vault can hold up to 500 variables.

​
Use a variable in a service

You can use a variable in the following fields when configuring a service: To use a variable:
1
Add a service, or open an existing service’s actions menu and select Edit. Then go to the Credential step.
2
In a field that accepts variables, type {{. A list of your variables appears.
The Credential step of a GitHub service, with a partly typed reference in the Token field and a list showing GITHUB_TOKEN and Create GITHUB_
3
Select a variable from the list. Infisical inserts the reference, such as {{GITHUB_TOKEN}}.
You can also create a variable without leaving the service. Type its key, then select Create at the end of the list. The Add Variable dialog opens with the key filled in, so you only need to enter a Value.
The Credential step of a GitHub service with a GITHUB_TOKEN reference as the Token, and the Sends preview showing the reference after Authorization: Bearer
A reference can fill a whole field or part of one. For example, if a custom header’s Value is org-{{ORG_ID}}, the proxy sends org- followed by the value of ORG_ID.

​
Check variable usage

To check which services are using a variable:
1
In Agent Vault, go to Variables.
2
In the variable’s Used By column, hover over an access bundle to see which of the access bundle’s services use the variable.

​
Update a variable

To update a variable:
1
In Agent Vault, go to Variables.
2
Open the variable’s actions menu and select Edit.
3
Update the key or the value. Leave Value blank to keep the current value.
4
Select Save.
If you rename a variable, the services that use it keep working without changes. If you change a variable’s value, the proxy starts using the new value within one poll interval (60 seconds by default), so you don’t need to restart running agents.

​
Delete a variable

To delete a variable:
1
In Agent Vault, go to Variables.
2
Open the variable’s actions menu and select Delete.
3
Select Delete Variable.
If any service still uses the variable, the dialog lists those services, and you can’t delete the variable until you remove the reference from each one.