pkinative-mcp
by Nizoka
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| PKINATIVE_MCP_AT | No | Pinned instant (ISO 8601, or epoch milliseconds) every omitted `at` / `notBefore` / `signingTime` falls back to, for reproducible verdicts and artefacts. Unset: the wall clock. | |
| PKINATIVE_MCP_PORT | No | When set to a valid port (1–65535), serves Streamable HTTP on http://127.0.0.1:<port>/mcp instead of stdio; any other value refuses to start. | |
| PKINATIVE_MCP_PASSWORD | No | (secret) The operator-side password of the encrypted PKCS#8 key or PKCS#12 file the tools open. It counts as the password of every password-accepting tool. | |
| PKINATIVE_MCP_CACHE_DIR | No | Opt-in content-addressed response cache (SHA-256 keyed, 1 h TTL, 256 MiB LRU, plaintext at rest). | |
| PKINATIVE_MCP_HTTP_TOKEN | No | (secret) Opt-in bearer token for the HTTP transport (≥ 16 characters, no whitespace — a weaker value aborts startup). | |
| PKINATIVE_MCP_OUTPUT_DIR | No | Absolute path of the one sandbox directory: every `path` input (PKI objects, content, keys) is read from it and `outputMode: 'file'` outputs are written under it (exclusive create — never overwritten). Unset ⇒ every tool works on inline PEM / base64 only. | |
| PKINATIVE_MCP_MAX_INPUT_BYTES | No | Operator ceiling for `limits.maxInputBytes` and the decoded size of one PKI object (the engine default). Integer ≥ 1024. | 67108864 |
| PKINATIVE_MCP_MAX_KDF_ITERATIONS | No | Operator ceiling for `limits.maxKdfIterations` and `limits.maxPkcs12KdfIterations` (the engine default): the CPU bound of a hostile PBES2 key or PKCS#12 file. Integer ≥ 1. | 10000000 |
| PKINATIVE_MCP_MAX_PATHS_EXPLORED | No | Operator ceiling for `limits.maxPathsExplored` (the engine default): the RFC 5280 §6 path-building work bound. Integer ≥ 1. | 1000 |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues