Get started
Quickstart
Connect to a PostgreSQL database through Infisical PAM.
Concepts
Learn how Infisical PAM controls access to your infrastructure.
Session lifecycle
Learn what happens from the moment someone connects to an account until the session ends.
Architecture
Learn how PAM connects people and agents to your infrastructure through a Gateway.
Accounts
Add the databases, servers, clusters, and cloud accounts that people connect to:Accounts
Store the credentials for a database or server that people and agents connect to through Infisical PAM.
Add an account
Store the connection details and credentials for a database or server in PAM.
Connect to an account
Open a session on an account from your browser or the Infisical CLI.
View credentials
Reveal the password or key stored for an account.
Manage an account
Change an account’s details, access, and settings after you add it.
Account types
Find the setup guide for each database, server, cluster, and cloud provider that PAM supports.
Access control
Decide who can connect to each account, and which rules and approvals apply:Access control
Control who can manage PAM and who can connect to each account.
Folders
Organize PAM accounts and control who can access them.
Account templates
Set the rules for connecting to the accounts that use a template.
Access requests
Require approval before a member can use a sensitive account.
Break-glass access
Let named responders grant themselves access in an emergency.
AI agents
Let AI agents work with your infrastructure through PAM:AI agents
Give an AI agent access to your databases and servers without giving it a credential.
Run an agent
Start an AI agent with access to the PAM accounts its task needs.
Agent instructions
Tell an AI agent which PAM accounts it can use and how to reach them.
Run unattended
Run an AI agent as its own machine identity.
Review and stop an agent
Check what an AI agent did with your accounts and remove its access.
Credential rotation
Change the passwords stored in PAM on a schedule:Credential rotation
Change the passwords of your PAM accounts on a schedule.
Monitoring
Review what people and agents did with your accounts, check that stored credentials still work, and find accounts on your systems to import:Sessions
Review and end the connections that people and agents make to your accounts.
Session recording
Review what happened during each session on your accounts.
External storage
Store session recordings in an S3-compatible bucket that you own.
Auditing
Track who accessed and changed what across PAM.
Credential health
Check on a schedule that the credentials stored for your PAM accounts still work.
Discovery
Find accounts on your systems and import them into PAM.