Skip to main content
An access bundle defines the list of services (external APIs or MCP servers) that an AI agent can access during a session. You can reuse access bundles across as many sessions as you like. This makes them useful for scoping what services an agent can access depending on its task. For example, you might have:
  • A code-review bundle that grants access to GitHub and Slack
  • A customer-feedback bundle that grants access to Discord, Resend, and Slack
  • A marketing bundle that grants access to Twilio and Google Docs
The Access Bundles page listing four access bundles with their services and member counts

​
Create an access bundle

To create a new access bundle:
1
In Agent Vault, go to Access Bundles and select Create Access Bundle.
2
Give the bundle a name that says what job it’s for, like code-review or marketing.
3
Select Create. The access bundle will appear in the list.
Now you can add services to the access bundle so agents using it can make authenticated requests. You can also add skills to the access bundle, so the CLI installs your team’s instructions for every agent that starts with it.

​
Manage access to access bundles

Since access bundles provide authentication to external APIs, members of your organization can’t create sessions with them by default. They need explicit access for each bundle.

​
Grant access

To allow a user, group, or machine identity to create sessions for a given access bundle:
1
Make sure the user, group, or machine identity is a member of Agent Vault. If not, add them under Access Control.
2
Open the access bundle from Access Bundles and select Options > Manage Access. Then, select Grant Access.
3
Select the user, group, or machine identity you want to grant access to. Then, select Grant Access.

​
Revoke access

To revoke access from a user, group, or machine identity, open the bundle and select Options > Manage Access. Find them with the search box, open their actions menu, and select Revoke Access. If any of their agents are running, those agents lose the bundle’s credentials within one poll interval.

​
Set up your personal values

Some services ask you for part of their credential, such as your own API key (see member-provided values). Until you set up your personal values for one of these services, your sessions can’t use it, and the service shows Requires Setup. This applies to admins too. To set up your personal values:
1
In Agent Vault, go to Access Bundles and select the access bundle.
2
Select Requires Setup next to the service, or open the service’s actions menu and select Set Up My Personal Values.
3
Enter each value. To use one of your personal variables, type {{ or select the arrow at the end of the field, then pick a variable from the list.
4
Select Save. The service shows Configured.
Infisical never shows your personal values to anyone else, admins included.
  • To change your personal values, open the service’s actions menu, select Update My Personal Values, and enter the values you want to change
  • To delete your personal values, select Remove in the same dialog, then select Remove Personal Values
A machine identity sets up its personal values with the set personal values endpoint, and keeps its own personal variables with the create variable endpoint.