PKI Studio MCP
OfficialServer Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| prompts | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| parse_asn1A | Parse ASN.1 DER, BER, PEM, HEX, or base64 text and return a JSON tree. |
| summarize_asn1A | Parse ASN.1 input and return a compact summary of tags, OIDs, and top-level nodes. |
| describe_nodeC | Describe a parsed ASN.1 node by node id. |
| extract_asn1_nodeB | Extract a parsed ASN.1 node and its subtree by node id as DER bytes. |
| normalize_asn1_inputA | Decode DER, BER, PEM, HEX, or base64 input and return round-trip re-encoded ASN.1 bytes. |
| asn1_node_valueB | Return the decoded display value and raw value bytes for one parsed ASN.1 node. |
| encode_oidA | Encode an object identifier string into ASN.1 OBJECT IDENTIFIER value bytes. |
| decode_oid_valueB | Decode ASN.1 OBJECT IDENTIFIER value bytes into dotted object identifier text. |
| resolve_oidB | Resolve an object identifier using the OID names bundled with PkiStudioJS. |
| parse_asn1_definitionB | Parse a supported ASN.1 definition subset into ASN.1 Instance Builder Schema Model JSON and return defined type names. |
| validate_asn1_instanceC | Validate JSON instance input against a selected type in a supported ASN.1 definition subset or Schema Model JSON. |
| validate_asn1_schemaB | Validate a supported ASN.1 definition subset or ASN.1 Instance Builder Schema Model JSON and return schema diagnostics. |
| create_asn1_instanceB | Build DER bytes from JSON instance input and a selected type in a supported ASN.1 definition subset or Schema Model JSON. |
| list_asn1_builder_featuresA | List the supported ASN.1 Instance Builder subset, JSON input shapes, and known limitations. |
| sift_asn1_definition_candidatesA | Rank ASN.1 definition candidates for ASN.1 data using custom ASN.1 definitions or the built-in PKI component corpus. |
| sift_pki_asn1_definition_candidatesB | Rank PKI ASN.1 definition candidates using the built-in ASN.1 Definition Sifter PKI corpus and optional profile filters. |
| list_asn1_definition_sifter_featuresA | List ASN.1 Definition Sifter tool scope, PKI profiles, and candidate report options. |
| recognize_key_materialA | Recognize a PKCS#8 private key or SPKI public key and return its key family, label, and capabilities. |
| list_supported_key_algorithmsA | List WebCrypto key pair algorithms supported by this runtime for key generation. |
| generate_key_pairA | Generate a key pair and return the private key as PKCS#8 DER and public key as SPKI DER. |
| verify_key_pairA | Verify that a PKCS#8 private key matches an SPKI public key by signing and verifying sample data. |
| certificate_matches_keyB | Check whether an X.509 certificate public key matches supplied public key bytes or a PKCS#8 private key. |
| parse_certificateA | Parse an X.509 certificate with CertGadgets and return its structure, details, and CDP/AIA/OCSP resource plans without network access. |
| fetch_certificate_network_resourcesA | Fetch HTTP(S) CDP/AIA/OCSP-related resources discovered in an X.509 certificate. Parsing itself is local; this tool performs external network access. |
| create_csrA | Create a PKCS#10 certificate signing request from a PKCS#8 private key, SPKI public key, and subject DN. |
| create_self_signed_certificateB | Create a self-signed X.509 certificate from a PKCS#8 private key, SPKI public key, and subject DN. |
| read_pkcs12A | Read PKCS#12/PFX data and return contained private keys, public keys, and certificates. |
| write_pkcs12B | Create PKCS#12/PFX data from one or more private keys and optional X.509 certificates. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| inspect_certificate | Guide an assistant through local X.509 certificate inspection, optional ASN.1 review, and optional network resource fetching. |
| compare_certificate_and_key | Guide an assistant through checking whether a certificate matches a private key or public key. |
| analyze_pkcs12 | Guide an assistant through reading and summarizing a PKCS#12/PFX bundle. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 28 tools
Each tool has a clearly distinct purpose within PKI operations, from ASN.1 parsing and building to certificate creation, key management, and OID resolution. Even closely related tools like sift_asn1_definition_candidates and sift_pki_asn1_definition_candidates are differentiated by scope (general vs. PKI-specific).
All tool names follow a consistent snake_case verb_noun pattern (e.g., create_asn1_instance, decode_oid_value, generate_key_pair). No mixing of conventions or vague verbs.
With 28 tools, the count is on the higher side but still justified by the broad PKI domain covering ASN.1, certificates, keys, OIDs, and PKCS#12. Each tool earns its place, though a few could potentially be consolidated.
The tool set comprehensively covers core PKI workflows: key generation, certificate creation (CSR, self-signed), parsing (certificates, ASN.1), validation, OID handling, PKCS#12 support, and network resource fetching. No obvious gaps for a PKI studio.