{"jtbd":{"id":"agent-secrets","slug":"agent-secrets","name":"Agent secrets & non-human credentials","shortName":"Agent secrets & non-human credentials","problemStatement":"Store and inject API keys for agents without leaking long-lived secrets into prompts, logs, or sandboxes."},"pick":{"id":"infisical","slug":"infisical","name":"Infisical","tagline":"Depot default for agent secrets when you want OSS exit + Agent Proxy (placeholders instead of raw keys in the…","website":"https://infisical.com","overall":8.36,"scoreBand":{"low":7.8,"mid":8.4,"high":9,"halfWidth":0.6,"basis":"editorial_prior","display":"7.8–9.0 (editorial prior)"},"scoreLayers":{"editorialPrior":8.36,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: Secrets billed per identity (human+machine). Free: 5 identities + MIT self-host core. Pro ~$20/identity/mo annual ($23 monthly); Advanced ~$40/$46 with dynamic secrets + Agent Proxy for dynamic secrets; Enterprise custom. Agent Proxy for static secrets on all plans including Free.","scores":{"capabilityFit":8.8,"pricePerformance":8.2,"latencyReliability":8.2,"developerDx":8.8,"privacyPosture":9,"lockInRisk":3.5,"maturity":7.8,"overall":8.36,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},"runnersUp":[{"id":"doppler","slug":"doppler","name":"Doppler","tagline":"Best secrets DX for most startups. Prefer Infisical when you need self-host or Agent Proxy that never hands…","website":"https://www.doppler.com","overall":8.47,"scoreBand":{"low":7.9,"mid":8.5,"high":9.1,"halfWidth":0.6,"basis":"editorial_prior","display":"7.9–9.1 (editorial prior)"},"scoreLayers":{"editorialPrior":8.47,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: Per-seat — Developer free for 3 users then $8/user; Team $21/user/mo (14-day trial); Enterprise custom. Marketing: AI agents and non-human identities ride free (no agent seat fees). Official MCP server listed on Team+.","scores":{"capabilityFit":8.6,"pricePerformance":8.4,"latencyReliability":8.8,"developerDx":9.4,"privacyPosture":8.5,"lockInRisk":5,"maturity":8.8,"overall":8.47,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},{"id":"onepassword-secrets","slug":"onepassword-secrets","name":"1Password Secrets Automation","tagline":"Use when the company already lives in 1Password Business. Don't buy 1Password just for agents — pick…","website":"https://developer.1password.com/docs/service-accounts","overall":7.98,"scoreBand":{"low":7.4,"mid":8,"high":8.6,"halfWidth":0.6,"basis":"editorial_prior","display":"7.4–8.6 (editorial prior)"},"scoreLayers":{"editorialPrior":7.98,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: Secrets Automation / Service Accounts included with 1Password Business (~$8.99/user/mo annual class) and Enterprise — no separate secrets SKU. Connect servers + Service Accounts for programmatic vault access.","scores":{"capabilityFit":7.8,"pricePerformance":7.5,"latencyReliability":9,"developerDx":7.8,"privacyPosture":9.2,"lockInRisk":5.5,"maturity":9.2,"overall":7.98,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},{"id":"hashicorp-vault","slug":"hashicorp-vault","name":"HashiCorp Vault (HCP)","tagline":"Runner-up for agent secrets when HashiCorp is already the standard. Infisical remains the depot default for…","website":"https://www.hashicorp.com/products/vault","overall":8.1,"scoreBand":{"low":7.5,"mid":8.1,"high":8.7,"halfWidth":0.6,"basis":"editorial_prior","display":"7.5–8.7 (editorial prior)"},"scoreLayers":{"editorialPrior":8.1,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: OSS Vault self-host free (you operate it). HCP Vault Dedicated is usage-based: cluster hours by edition/size (Starter/Development/Essentials/Standard × XS–L) billed per minute, plus monthly unique Clients. Secondary 2026 guides cite Essentials Small ~$1.58–$1.60/hr (~$1.1k/mo) + ~$72.92 per active client/mo; Development ~$0.03/hr with a 25-client cap. Confirm live HCP portal — HashiCorp does not publish a single marketing rate card. Official Vault MCP server exists (GitHub/Docker) for agent tool access.","scores":{"capabilityFit":9.2,"pricePerformance":6.2,"latencyReliability":9.4,"developerDx":7,"privacyPosture":9.5,"lockInRisk":5.5,"maturity":9.6,"overall":8.1,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},{"id":"aws-secrets-manager","slug":"aws-secrets-manager","name":"AWS Secrets Manager","tagline":"Default only if the agent already runs inside AWS with IAM roles. Otherwise Doppler/Infisical.","website":"https://aws.amazon.com/secrets-manager/","overall":7.69,"scoreBand":{"low":7.1,"mid":7.7,"high":8.3,"halfWidth":0.6,"basis":"editorial_prior","display":"7.1–8.3 (editorial prior)"},"scoreLayers":{"editorialPrior":7.69,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: ~$0.40/secret/month + $0.05 per 10k API calls (classic AWS list); rotation via Lambda. Fine when already on AWS IAM.","scores":{"capabilityFit":8,"pricePerformance":7,"latencyReliability":9.4,"developerDx":6.5,"privacyPosture":8.8,"lockInRisk":7,"maturity":9.5,"overall":7.69,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}}],"scoreBand":{"low":7.8,"mid":8.4,"high":9,"halfWidth":0.6,"basis":"editorial_prior","display":"7.8–9.0 (editorial prior)"},"scoreLayers":{"editorialPrior":8.36,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"whyPickOverHigherScore":{"pickId":"infisical","pickName":"Infisical","pickScore":8.36,"highestScoredCandidateId":"doppler","highestScoredCandidateName":"Doppler","highestScore":8.47,"pickHasLowerCompositeScore":true,"delta":-0.11,"pickLeadsOnDimensions":["capabilityFit (8.8 vs 8.6)","privacyPosture (9 vs 8.5)","lower lockInRisk (3.5 vs 5)"],"explanation":"Infisical (8.36) is the editorial pick for Agent secrets & non-human credentials over higher-composite Doppler (8.47) because composite scores are provider-wide priors while Infisical wins on capabilityFit (8.8 vs 8.6), privacyPosture (9 vs 8.5), lower lockInRisk (3.5 vs 5): privacy + dx + lockInRisk. Infisical wins on Agent Proxy + MIT self-host; Doppler wins pure DX."},"cheapest":null,"recommendedWorkloadQuote":{"providerId":"infisical","providerName":"Infisical","skuId":"infisical-secrets-pro-annual","item":"Secrets Management Pro annual","plan":"Secrets Management Pro annual — Per identity per month when billed annually","unit":"usd_per_identity_month","amountUsd":20,"outputSkuId":null,"outputItem":null,"outputAmountUsd":null,"outputUnit":null,"sourceUrl":"https://infisical.com/pricing","asOf":"2026-10-03","pricingLastVerifiedAt":"2026-10-03","isFlagshipForJob":false,"differsFromFloorCheapest":false,"representativeQuote":{"skuId":"infisical-secrets-pro-annual","item":"Secrets Management Pro annual","plan":"Secrets Management Pro annual — Per identity per month when billed annually","amountUsd":20,"inputOrUnitUsd":20,"unit":"usd_per_identity_month","outputUsd":null,"outputUnit":null,"sourceUrl":"https://infisical.com/pricing","asOf":"2026-10-03"},"estimatedTaskCost":{"tasks":1000,"retryAndToolOverheadMultiplier":1.15,"retryToolOverheadMultiplier":1.15,"unitsPerTask":1,"baseCostPer1kTasksUsd":20,"totalUsd":23,"estimatedTotalUsd":23,"perTaskUsd":0.023,"estimatedCostPerTaskUsd":0.023,"formula":"Monthly base plan $20/mo covering 1,000 tasks (1.15x overhead buffer)","assumptions":"Monthly subscription plan amortized over 1,000 tasks/month."}},"representativeQuote":{"skuId":"infisical-secrets-pro-annual","item":"Secrets Management Pro annual","plan":"Secrets Management Pro annual — Per identity per month when billed annually","amountUsd":20,"inputOrUnitUsd":20,"unit":"usd_per_identity_month","outputUsd":null,"outputUnit":null,"sourceUrl":"https://infisical.com/pricing","asOf":"2026-10-03"},"estimatedTaskCost":{"tasks":1000,"retryAndToolOverheadMultiplier":1.15,"retryToolOverheadMultiplier":1.15,"unitsPerTask":1,"baseCostPer1kTasksUsd":20,"totalUsd":23,"estimatedTotalUsd":23,"perTaskUsd":0.023,"estimatedCostPerTaskUsd":0.023,"formula":"Monthly base plan $20/mo covering 1,000 tasks (1.15x overhead buffer)","assumptions":"Monthly subscription plan amortized over 1,000 tasks/month."},"freeAlternatives":[],"referenceDocs":[],"falsification":{"jtbdId":"agent-secrets","jtbdName":"Agent secrets & non-human credentials","currentPickId":"infisical","currentPickScore":8.36,"challengerId":"doppler","challengerScore":8.47,"currentScoreGap":0.11,"minVerifiedOutcomes":10,"requiredOutcomeMargin":0.26,"requiredSuccessRateDelta":0.15,"maxPickPriceIncreasePct":25,"whatWouldChangePick":["Doppler (doppler) outperforms Infisical (infisical) by >= 0.26 outcome points (or >= 15% worked-rate delta) across >= 10 Countersign-verified production outcomes.","A verified price increase > 25% on Infisical's representative SKU for agent-secrets without a corresponding capability gain.","Live caller rail exhaustion (?exhausted=infisical) or sustained >= 30% degraded/failed rate in verified production outcomes."],"frozenHoldoutPolicy":{"holdoutSplit":"20% frozen benchmark holdout tasks + 80% live production outcome receipts","requireCountersignReceipt":true,"requiredEvidenceTiers":["outcome_verified","reference_checked"],"minDistinctContributors":2,"antiGamingRule":"Unverified self-reports and seed/editorial rows never mutate picks or scores."},"triggers":[{"kind":"verified_outcomes_outperformance","challengerId":"doppler","minVerifiedOutcomes":10,"requiredOutcomeMargin":0.26,"requiredWorkedRateDelta":0.15},{"kind":"verified_price_increase","providerId":"infisical","maxPriceIncreasePct":25},{"kind":"live_rail_exhaustion_or_degradation","providerId":"infisical","immediateOverrideUrl":"/api/decide?jtbd=agent-secrets&exhausted=infisical"}],"submissionSpec":{"falsifyEndpoint":"/api/falsify?jtbd=agent-secrets","outcomesEndpoint":"POST /api/feedback","correctionsEndpoint":"POST /api/corrections","payloadTemplate":{"agentIdentity":"agent:<your-agent-id>","jtbdId":"agent-secrets","providerId":"doppler","outcome":"worked","detail":"Comparative production evaluation on agent-secrets (n>=10 tasks) with Countersign receipt.","confidence":"high","receipt":{"countersign":{"claim_id":"cs-00000000","status":"verified","evidence_tier":"outcome_verified","counts_as_verified":true}}}}},"whatWouldChangePick":["Doppler (doppler) outperforms Infisical (infisical) by >= 0.26 outcome points (or >= 15% worked-rate delta) across >= 10 Countersign-verified production outcomes.","A verified price increase > 25% on Infisical's representative SKU for agent-secrets without a corresponding capability gain.","Live caller rail exhaustion (?exhausted=infisical) or sustained >= 30% degraded/failed rate in verified production outcomes."],"routePlan":{"jtbdId":"agent-secrets","primary":{"providerId":"infisical","name":"Infisical","overall":8.36,"scoreBand":{"low":7.8,"mid":8.4,"high":9,"halfWidth":0.6,"basis":"editorial_prior","display":"7.8–9.0 (editorial prior)"},"scoreLayers":{"editorialPrior":8.36,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"primary","reason":"Editorial Depot Pick for Agent secrets & non-human credentials; healthy/eligible under caller constraints."},"fallback":[{"providerId":"doppler","name":"Doppler","overall":8.47,"scoreBand":{"low":7.9,"mid":8.5,"high":9.1,"halfWidth":0.6,"basis":"editorial_prior","display":"7.9–9.1 (editorial prior)"},"scoreLayers":{"editorialPrior":8.47,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Agent secrets & non-human credentials."},{"providerId":"onepassword-secrets","name":"1Password Secrets Automation","overall":7.98,"scoreBand":{"low":7.4,"mid":8,"high":8.6,"halfWidth":0.6,"basis":"editorial_prior","display":"7.4–8.6 (editorial prior)"},"scoreLayers":{"editorialPrior":7.98,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Agent secrets & non-human credentials."},{"providerId":"hashicorp-vault","name":"HashiCorp Vault (HCP)","overall":8.1,"scoreBand":{"low":7.5,"mid":8.1,"high":8.7,"halfWidth":0.6,"basis":"editorial_prior","display":"7.5–8.7 (editorial prior)"},"scoreLayers":{"editorialPrior":8.1,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Agent secrets & non-human credentials."},{"providerId":"aws-secrets-manager","name":"AWS Secrets Manager","overall":7.69,"scoreBand":{"low":7.1,"mid":7.7,"high":8.3,"halfWidth":0.6,"basis":"editorial_prior","display":"7.1–8.3 (editorial prior)"},"scoreLayers":{"editorialPrior":7.69,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Agent secrets & non-human credentials."}],"disqualified":[],"expectedRegret":{"scoreDeltaVsUnconstrainedPick":0,"unconstrainedPickId":"infisical","activePrimaryId":"infisical","summary":"0.00 score regret: unconstrained editorial pick satisfies all caller constraints."},"evidenceAgeDays":{"editorialScoreAgeDays":43,"pricingVerifiedAgeDays":0,"editorialPriorAsOf":"2026-09-14","pricingLastVerifiedAt":"2026-10-27"},"confidenceBand":{"low":7.8,"mid":8.4,"high":9,"halfWidth":0.6,"basis":"editorial_prior","display":"7.8–9.0 (editorial prior)"},"constraintsApplied":false,"constraintBundle":{"task":null,"jtbd":"agent-secrets","quotaExhausted":[],"degraded":[],"healthy":[],"budgetUsd":null,"maxLatencyMs":null,"region":null,"privacy":null,"exit":[],"existing":[]}},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","tie":false,"scoreGap":-0.11,"decidingFactor":null,"tieNote":null,"rationale":"privacy + dx + lockInRisk. Infisical wins on Agent Proxy + MIT self-host; Doppler wins pure DX.","whenNotTopPick":"Want seat-priced SaaS DX + free agent identities — Doppler; already standardized on 1Password Business — onepassword-secrets; HashiCorp estate / dynamic creds — hashicorp-vault; pure AWS IAM world — aws-secrets-manager.","skipTopPick":false,"skipReason":null,"matchedConstraints":[],"pricingSummary":"As of 2026-09-14: Secrets billed per identity (human+machine). Free: 5 identities + MIT self-host core. Pro ~$20/identity/mo annual ($23 monthly); Advanced ~$40/$46 with dynamic secrets + Agent Proxy for dynamic secrets; Enterprise custom. Agent Proxy for static secrets on all pl…","cite":"Depot Pick for agent-secrets: infisical (asOf 2026-09-14). See GET /api/jtbds/agent-secrets + GET /api/methodology.","nextActions":[{"step":1,"title":"Inspect full JTBD + embeds","href":"/api/jtbds/agent-secrets?embed=providers","why":"Confirm pick, runners-up, and methodology notes."},{"step":2,"title":"Quote sourced SKUs","href":"/api/quote?jtbd=agent-secrets","why":"Depot Pick SKUs plus the cheapest sourced SKU whose unit matches this job. Does not change the pick. Does not blend input and output or borrow a chat rate for a non-chat job."},{"step":3,"title":"Open provider detail","href":"/api/providers/infisical","why":"Scores, pricingNotes, strengths/weaknesses, communitySignals (claims only)."},{"step":4,"title":"Cite methodology","href":"/api/methodology","why":"Required when publishing a Depot Pick citation."},{"step":5,"title":"Grab badge SVG","href":"/api/badge?type=depot-pick&jtbd=agent-secrets","why":"Embed in README / agent passport."},{"step":6,"title":"Post production insight","method":"POST","href":"/api/insights","why":"Unverified until curated; never auto-mutates official scores."}],"honesty":["Do not invent scores or benches.","Insights are claims until curated/reviewed; they never silently mutate official scores.","lockInRisk higher = more lock-in (worse).","normalizedUsdPerMillionTokens is set only for a single sourced token row. Otherwise null, with a machine-readable reason. Do not coerce GPU, minute, or per-1k search units.","Runners-up are not Depot Picks.","Depot overall is editorial_weighted, not Arena Elo and not an Artificial Analysis index."],"asOf":"2026-09-14","depth":{"whenNotToUse":{"text":"Want seat-priced SaaS DX + free agent identities — Doppler; already standardized on 1Password Business — onepassword-secrets; HashiCorp estate / dynamic creds — hashicorp-vault; pure AWS IAM world — aws-secrets-manager.","source":"editorial `whenNotTopPick` (data/jtbds.json)"},"whenNotToUseReason":null,"runnerUp":{"providerId":"doppler","name":"Doppler","overallForJob":8.47,"pickOverallForJob":8.36,"beatsPickOn":["pricePerformance","latencyReliability","developerDx","maturity"],"source":"first resolvable entry of the job's editorially ranked `runnersUpIds`; scores are stored job-weighted scores"},"runnerUpReason":null,"lockIn":{"pickLockInRisk":3.5,"runnerUpLockInRisk":5,"scale":"0–10 stored curated estimate; higher = more lock-in (worse)","pickExitSignals":["self-hostable (provider tag `self-host`)","open source (provider tag `oss`)"],"runnerUpExitSignals":[],"pickNotes":[{"text":"MIT-licensed self-host + strong agent/machine identity story","field":"strengths"},{"text":"Strengths: MIT-licensed self-host + strong agent/machine identity story;","field":"description"}],"selfHostFallback":[],"migration":"The pick has lower stored lock-in risk than runner-up Doppler (3.5 vs 5). Pick exit signals: self-hostable (provider tag `self-host`); open source (provider tag `oss`).","migrationReason":null,"derivedFrom":"stored lockInRisk scores, provider tags (oss, self-host, openai-compat, open-models), free rows that list this job, and verbatim provider notes. No migration guide was invented."}},"citation":{"text":"Agent Provider Depot (v0.12.152), Depot Pick for agent-secrets: infisical, scores as of 2026-09-14, retrieved 2026-10-27. https://getagentdepot.com/jtbds/agent-secrets","markdown":"[Agent Provider Depot](https://getagentdepot.com/jtbds/agent-secrets) (v0.12.152) — Depot Pick for `agent-secrets`: **infisical** (scores as of 2026-09-14, retrieved 2026-10-27)","fields":{"publisher":"Agent Provider Depot","version":"0.12.152","role":"depot_pick","jtbdId":"agent-secrets","providerId":"infisical","scoreAsOf":"2026-09-14","retrievedOn":"2026-10-27","page":"https://getagentdepot.com/jtbds/agent-secrets","api":"https://getagentdepot.com/api/decide?jtbd=agent-secrets"},"howToCite":"Cite Depot as an editorial, dated recommendation, not a benchmark: name the job, the Depot Pick (or runner-up), the score asOf date and the day you retrieved it, and link the job page. Format: “Agent Provider Depot (v{version}), Depot Pick for {jobId}: {providerId}, scores as of {scoreAsOf}, retrieved {retrievedOn}. {baseUrl}/jtbds/{jobId}”. Quote prices only with their own sourceUrl and asOf. If the pick's score is stale (freshness.pick.score.stale), say so."},"freshness":{"pick":{"score":{"asOf":"2026-09-14","ageDays":43,"stale":true,"staleAfterDays":30,"reason":null},"lastReviewed":{"asOf":"2026-09-14","ageDays":43,"stale":true,"staleAfterDays":30,"reason":null},"sourceCheck":{"checkedAt":"2026-10-27","sourceUrls":2,"sourcesReachable":2,"pricingRows":5,"pricingRowsReconfirmed":1,"note":"A source re-check confirms the page is reachable and, for pricing rows, that the stored amount and SKU name appear on it. It does not re-derive or change the score.","reason":null}},"scoreAsOf":"2026-09-14","editorialPriorAsOf":"2026-09-14","pricingLastVerifiedAt":"2026-10-27","pickLastReviewed":"2026-09-14","runnersUpScoreAsOf":["2026-09-14","2026-09-14","2026-09-14","2026-09-14"],"contractAsOf":"2026-10-03","pricingShape":"sourced_rows","normalizedUsdPerMillionTokens":null,"normalizationStatus":"unit_mismatch","normalizationReason":"unit_mismatch"},"pricingContract":{"normalizedUsdPerMillionTokens":null,"normalizationStatus":"unit_mismatch","normalizationReason":"unit_mismatch","shape":"sourced_rows","filterable":false,"priceSortEligible":false,"priceSortKeyUsdPerMillionInputTokens":null,"rows":[{"id":"infisical-secrets-pro-monthly","providerId":"infisical","sku":"Secrets Management Pro monthly","unit":"usd_per_identity_month","amountUsd":23,"currency":"USD","sourceUrl":"https://infisical.com/pricing","asOf":"2026-10-03","normalizationStatus":"unit_mismatch","normalizedUsdPerMillionTokens":null,"normalizationReason":"unit_mismatch_per_identity_month","priceSortEligible":false,"qualifier":"Per identity per month, monthly billing. Annual price is a separate row. An identity is a human or machine principal."},{"id":"infisical-secrets-pro-annual","providerId":"infisical","sku":"Secrets Management Pro annual","unit":"usd_per_identity_month","amountUsd":20,"currency":"USD","sourceUrl":"https://infisical.com/pricing","asOf":"2026-10-03","normalizationStatus":"unit_mismatch","normalizedUsdPerMillionTokens":null,"normalizationReason":"unit_mismatch_per_identity_month","priceSortEligible":false,"qualifier":"Per identity per month when billed annually. Not blended with the monthly price."},{"id":"infisical-secrets-advanced-monthly","providerId":"infisical","sku":"Secrets Management Advanced monthly","unit":"usd_per_identity_month","amountUsd":46,"currency":"USD","sourceUrl":"https://infisical.com/pricing","asOf":"2026-10-03","normalizationStatus":"unit_mismatch","normalizedUsdPerMillionTokens":null,"normalizationReason":"unit_mismatch_per_identity_month","priceSortEligible":false,"qualifier":"Per identity per month, monthly billing."},{"id":"infisical-secrets-advanced-annual","providerId":"infisical","sku":"Secrets Management Advanced annual","unit":"usd_per_identity_month","amountUsd":40,"currency":"USD","sourceUrl":"https://infisical.com/pricing","asOf":"2026-10-03","normalizationStatus":"unit_mismatch","normalizedUsdPerMillionTokens":null,"normalizationReason":"unit_mismatch_per_identity_month","priceSortEligible":false,"qualifier":"Per identity per month when billed annually."},{"id":"infisical-pam-pro","providerId":"infisical","sku":"Privileged Access Pro","unit":"usd_per_user_month","amountUsd":20,"currency":"USD","sourceUrl":"https://infisical.com/pricing","asOf":"2026-10-03","normalizationStatus":"unit_mismatch","normalizedUsdPerMillionTokens":null,"normalizationReason":"unit_mismatch_per_user_month","priceSortEligible":false,"qualifier":"PAM product, per human user per month. Not the Secrets Management identity rate."}],"notesExcerpt":"As of 2026-09-14: Secrets billed per identity (human+machine). Free: 5 identities + MIT self-host core. Pro ~$20/identity/mo annual ($23 monthly); Advanced ~$40/$46 with dynamic secrets + Agent Proxy for dynamic secrets; Enterprise custom. Agent Proxy for static secrets on all pl…","notesCheck":{"status":"no_known_contradiction","pairs":[],"review":null,"note":null},"lastReviewed":"2026-09-14","scoreAsOf":"2026-09-14","website":"https://infisical.com","doNotParse":"Do not parse pricingNotes. Use rows only. normalizedUsdPerMillionTokens is a single number only when this provider has exactly one sourced token row. Input/output, context tiers, and non-token units stay null at this level.","gap":"Partial coverage. Providers without a fetched SKU are omitted. See GET /api/pricing."},"links":{"jtbd":"/jtbds/agent-secrets","jtbdApi":"/api/jtbds/agent-secrets","leaderboard":"/api/leaderboards?jtbd=agent-secrets","methodology":"/api/methodology","badge":"/api/badge?type=depot-pick&jtbd=agent-secrets","decide":"/api/decide?jtbd=agent-secrets","humanPage":"/jtbds/agent-secrets","alternatives":"/api/alternatives?provider=infisical","canonical":"/api/canonical","quote":"/api/quote?jtbd=agent-secrets","falsify":"/api/falsify?jtbd=agent-secrets"},"constraintBundle":{"task":null,"jtbd":"agent-secrets","quotaExhausted":[],"degraded":[],"healthy":[],"budgetUsd":null,"maxLatencyMs":null,"region":null,"privacy":null,"exit":[],"existing":[]},"stackContext":{"host":null,"framework":null,"repo":null,"lang":null,"existing":[],"volume":null,"sender":null,"detectedFromTask":[]},"keep":null,"contextAdvice":null,"communityFeedback":{"pickOnThisJob":{"failed":0,"degraded":0,"worked":0,"insights":0,"withVerifiedReceipt":0,"failureModes":{},"latestAt":null,"note":"Agent-reported claims (unverified unless a receipt is verified by Depot's re-check). They never change scores or picks."},"outcomes":{"job":{"n":0,"worked":0,"degraded":0,"failed":0,"failureModes":{},"verifiedReports":0,"contributors":0,"excluded":{"seed_editorial":0,"test":0,"notFeedback":0},"reason":"no_submitted_outcome_reports_yet"},"pick":{"providerId":"infisical","n":0,"worked":0,"degraded":0,"failed":0,"failureModes":{},"evidenceTiers":{"agent_claim":0,"self_declared":0,"reference_checked":0,"outcome_verified":0},"reason":"no_submitted_outcome_reports_yet"},"scoresMutated":false,"more":"/api/outcomes?jtbd=agent-secrets"},"report":"POST /api/feedback {agentIdentity, outcome: failed|degraded|worked, detail, providerId, jtbdId, failureModeId?, receipt?}"}}