PKI Studio MCP
OfficialServer Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| prompts | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| parse_asn1A | Parse ASN.1 DER, BER, PEM, HEX, or base64 text and return a JSON tree. |
| summarize_asn1A | Parse ASN.1 input and return a compact summary of tags, OIDs, and top-level nodes. |
| describe_nodeC | Describe a parsed ASN.1 node by node id. |
| extract_asn1_nodeB | Extract a parsed ASN.1 node and its subtree by node id as DER bytes. |
| normalize_asn1_inputA | Decode DER, BER, PEM, HEX, or base64 input and return round-trip re-encoded ASN.1 bytes. |
| asn1_node_valueB | Return the decoded display value and raw value bytes for one parsed ASN.1 node. |
| encode_oidA | Encode an object identifier string into ASN.1 OBJECT IDENTIFIER value bytes. |
| decode_oid_valueB | Decode ASN.1 OBJECT IDENTIFIER value bytes into dotted object identifier text. |
| resolve_oidB | Resolve an object identifier using the OID names bundled with PkiStudioJS. |
| parse_asn1_definitionB | Parse a supported ASN.1 definition subset into ASN.1 Instance Builder Schema Model JSON and return defined type names. |
| validate_asn1_instanceC | Validate JSON instance input against a selected type in a supported ASN.1 definition subset or Schema Model JSON. |
| validate_asn1_schemaB | Validate a supported ASN.1 definition subset or ASN.1 Instance Builder Schema Model JSON and return schema diagnostics. |
| create_asn1_instanceB | Build DER bytes from JSON instance input and a selected type in a supported ASN.1 definition subset or Schema Model JSON. |
| list_asn1_builder_featuresA | List the supported ASN.1 Instance Builder subset, JSON input shapes, and known limitations. |
| sift_asn1_definition_candidatesA | Rank ASN.1 definition candidates for ASN.1 data using custom ASN.1 definitions or the built-in PKI component corpus. |
| sift_pki_asn1_definition_candidatesB | Rank PKI ASN.1 definition candidates using the built-in ASN.1 Definition Sifter PKI corpus and optional profile filters. |
| list_asn1_definition_sifter_featuresA | List ASN.1 Definition Sifter tool scope, PKI profiles, and candidate report options. |
| recognize_key_materialA | Recognize a PKCS#8 private key or SPKI public key and return its key family, label, and capabilities. |
| list_supported_key_algorithmsA | List WebCrypto key pair algorithms supported by this runtime for key generation. |
| generate_key_pairA | Generate a key pair and return the private key as PKCS#8 DER and public key as SPKI DER. |
| verify_key_pairA | Verify that a PKCS#8 private key matches an SPKI public key by signing and verifying sample data. |
| certificate_matches_keyB | Check whether an X.509 certificate public key matches supplied public key bytes or a PKCS#8 private key. |
| parse_certificateA | Parse an X.509 certificate with CertGadgets and return its structure, details, and CDP/AIA/OCSP resource plans without network access. |
| fetch_certificate_network_resourcesA | Fetch HTTP(S) CDP/AIA/OCSP-related resources discovered in an X.509 certificate. Parsing itself is local; this tool performs external network access. |
| create_csrA | Create a PKCS#10 certificate signing request from a PKCS#8 private key, SPKI public key, and subject DN. |
| create_self_signed_certificateB | Create a self-signed X.509 certificate from a PKCS#8 private key, SPKI public key, and subject DN. |
| read_pkcs12A | Read PKCS#12/PFX data and return contained private keys, public keys, and certificates. |
| write_pkcs12B | Create PKCS#12/PFX data from one or more private keys and optional X.509 certificates. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| inspect_certificate | Guide an assistant through local X.509 certificate inspection, optional ASN.1 review, and optional network resource fetching. |
| compare_certificate_and_key | Guide an assistant through checking whether a certificate matches a private key or public key. |
| analyze_pkcs12 | Guide an assistant through reading and summarizing a PKCS#12/PFX bundle. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/pkistudio/pkistudiomcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server