OpenAI connection - Infisical

Infisical supports connecting to OpenAI using an Admin API Key. This connection is used to create and rotate OpenAI project service accounts via Secret Rotation.

Prerequisites

You need an OpenAI Admin API key created by an Organization Owner. Admin API keys are organization-scoped and can manage organization resources such as users, projects, and API keys. A regular project API key (for example, one starting with sk-) doesn’t have these permissions and will fail validation.

Create an OpenAI admin API key

Open your account menu

In the OpenAI dashboard, select your account in the bottom-left corner to open the menu.

Open Organization settings

Select Organization settings from the menu.

Navigate to Admin keys

In the organization settings, open the Admin keys tab.

Create a new Admin key

Click Create new Admin key on the top right corner.

Name and create the key

Give the key a descriptive name (e.g. infisical-key), set the permissions as needed, and click Create admin key.

Copy the Admin API key

Copy the generated Admin API key and store it securely. It will only be shown once.

Create a dedicated Admin API key for Infisical rather than reusing an existing one. This makes it easy to rotate or revoke access independently.

Create OpenAI connection in Infisical

Infisical UI
API

Navigate to App Connections

In your Infisical dashboard, go to Integrations → App Connections tab in your project.

Select OpenAI Connection

Click Add Connection and choose OpenAI from the list of available connections.

Fill out Connection Form

Complete the form with:

A name for the connection
An optional description
Your Admin API Key (from the steps above)

Connection Created

After clicking Connect to OpenAI, Infisical validates the key against the OpenAI API. Your OpenAI Connection is then ready to use for OpenAI Service Account Secret Rotation.

Create an OpenAI connection via the Create OpenAI Connection API endpoint.

Sample request

Request

curl --request POST \
  --url https://app.infisical.com/api/v1/app-connections/openai \
  --header 'Content-Type: application/json' \
  --data '{
    "name": "my-openai-connection",
    "method": "api-key",
    "credentials": {
      "apiKey": "<YOUR-ADMIN-API-KEY>"
    }
  }'

Sample response

Response

{
  "appConnection": {
    "id": "e5d18aca-86f7-4026-a95e-efb8aeb0d8e6",
    "name": "my-openai-connection",
    "description": null,
    "version": 1,
    "orgId": "6f03caa1-a5de-43ce-b127-95a145d3464c",
    "createdAt": "2025-04-23T19:46:34.831Z",
    "updatedAt": "2025-04-23T19:46:34.831Z",
    "isPlatformManagedCredentials": false,
    "app": "openai",
    "method": "api-key",
    "credentials": {}
  }
}

​Prerequisites

​Create an OpenAI admin API key

​Create OpenAI connection in Infisical

​Sample request

​Sample response

Prerequisites

Create an OpenAI admin API key

Create OpenAI connection in Infisical

Sample request

Sample response