thales-cdsp-csm-mcp-server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| LOG_LEVEL | No | Log level | INFO |
| AKEYLESS_API_URL | Yes | URL of the CipherTrust Manager Akeyless API | |
| AKEYLESS_ACCESS_ID | Yes | Your Akeyless access ID | |
| AKEYLESS_ACCESS_KEY | Yes | Your Akeyless access key | |
| AKEYLESS_VERIFY_SSL | No | Whether to verify SSL | false |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| logging | {} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| extensions | {
"io.modelcontextprotocol/ui": {}
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| get_api_referenceA | API REFERENCE TOOL - Generate production-ready code examples and integration patterns SUPPORTED ENDPOINTS: • workflow: Complete integration patterns and best practices • auth: Authentication flows and token management • create-secret: Secret creation and management APIs • get-secret-value: Secret retrieval and access patterns • list-items: Item listing and discovery APIs • delete-item: Item deletion and cleanup operations • list-roles: Role management and access control • list-targets: Target management and configuration INTEGRATION FEATURES: • Production-ready code examples with authentication • Complete error handling and retry logic • Best practices for secure integration patterns • Multi-language support (Python, JavaScript, etc.) • Token management and session handling USE CASES: • Building custom applications and integrations • CI/CD pipeline integration and automation • Microservice authentication and configuration • Native client development and SDK creation • Production system integration and deployment Example: Generate complete Python client code for secret management |
| manage_accountA | ACCOUNT ADMINISTRATION TOOL - Manage organizational settings and governance SUPPORTED ACTIONS: • get: Retrieve complete account configuration, licensing details, and system-wide policies ACCOUNT INFORMATION PROVIDED: • Organizational details and company profile • Licensing and subscription tier information • Service tier, SLA level, and feature availability • Usage quotas, capacity limits, and billing details • System configuration and security policies • Governance, compliance, and audit settings • Multi-tenant configuration and access controls USE CASES: • Account setup and initial configuration • Compliance and audit preparation • License management and planning • Security policy review and updates • Service tier evaluation and upgrades • Multi-tenant administration Example: Review account licensing and compliance configuration |
| manage_analyticsA | ANALYTICS & MONITORING TOOL - Comprehensive infrastructure monitoring and reporting SUPPORTED ACTIONS: • get: Retrieve comprehensive monitoring data, usage statistics, and performance metrics ANALYTICS COVERAGE: • Usage statistics and item counts by type (Secrets, Targets, Roles, Keys) • Geographic distribution of access requests and client patterns • Security risk analysis and certificate expiry tracking • Authentication method usage and access control compliance • Multi-region usage distribution and product-specific metrics • Resource utilization, capacity planning, and audit summaries FILTERING OPTIONS: • Filter by item type (Targets, Static Secrets, Dynamic Secrets, DFC Keys, etc.) • Filter by risk level (Expired, Healthy, Expiring Soon certificates) • Filter by product component (Secrets Management, Advanced Data Protection, etc.) USE CASES: • Security operations center (SOC) dashboards • Compliance reporting and audit preparation • Capacity planning and resource optimization • Risk assessment and vulnerability management • Executive reporting and KPI tracking Example: Get security risk analysis for certificate expiry management |
| manage_auth_methodsA | AUTHENTICATION METHODS MANAGEMENT TOOL - Create, manage, and secure authentication methods SUPPORTED ACTIONS: • create_api_key: Create API key authentication methods with IP restrictions and expiration • create_email: Create email-based authentication methods with MFA support • list: List all authentication methods with filtering and pagination • get: Retrieve detailed authentication method configuration and status • update: Modify authentication method properties, credentials, and settings • delete: Delete individual authentication methods with proper cleanup • delete_auth_methods: Bulk delete authentication methods within a specific path SECURITY FEATURES: • IP address restrictions and CIDR whitelisting • Access expiration and JWT TTL management • Multi-factor authentication (MFA) support • Audit logging and compliance tracking • Delete protection and access control Example: Create a secure API key for application authentication |
| manage_customer_fragmentsA | CUSTOMER FRAGMENT MANAGEMENT TOOL - Manage customer fragment encryption and security SUPPORTED ACTIONS: • list: List customer fragments with path filtering and pattern matching • export: Export customer fragments with optional JSON format • download: Download customer fragments (alias for export action) SECURITY FEATURES: • Customer fragment encryption for enhanced security • Access control and audit trails • Enterprise-grade fragment management • Compliance and security reporting USE CASES: • Customer fragment inventory and management • Security compliance and audit preparation • Fragment backup and export operations • Enhanced encryption key management Example: List and export customer fragments for security audit |
| manage_dfc_keysA | DFC KEY MANAGEMENT TOOL - Advanced encryption key management and lifecycle SUPPORTED ACTIONS: • create: Create new DFC keys with encryption algorithms (AES128GCM, AES256GCM, RSA2048, etc.) • update: Modify DFC key properties, tags, and metadata • delete: Delete DFC keys with proper cleanup • list: List DFC keys in directory with filtering • set_state: Enable/disable DFC keys for access control • rotate: Rotate DFC keys on demand with new certificates and key data ADVANCED FEATURES: • Auto-rotation with configurable intervals (7-365 days) • Customer fragment encryption for enhanced security • Self-signed certificate generation with X.509 support • Split levels (3 or 4 fragments) for key distribution • Expiration and rotation event notifications • Comprehensive metadata and configuration support SECURITY CAPABILITIES: • Enterprise-grade key management with audit trails • Access control and delete protection • Customer fragment integration • Certificate lifecycle management • Compliance and governance reporting Example: Create an AES256GCM DFC key with auto-rotation for application encryption |
| manage_gatewaysB | GATEWAY MANAGEMENT TOOL - Monitor and manage gateway infrastructure SUPPORTED ACTIONS: • list: List available gateways with detailed information and filtering GATEWAY INFORMATION PROVIDED: • Gateway configuration and status • Connection details and endpoints • Performance metrics and health status • Access control and security settings • Integration and routing information USE CASES: • Gateway infrastructure monitoring • Connection troubleshooting and diagnostics • Performance analysis and optimization • Security configuration review • Gateway inventory and management Example: List all gateways to monitor infrastructure health |
| manage_rolesA | ROLE MANAGEMENT TOOL - Discover and analyze role-based access control SUPPORTED ACTIONS: • list: Discover all roles with advanced filtering and pagination • get: Retrieve comprehensive role details including permissions, access rules, and policies ROLE INFORMATION PROVIDED: • Permission sets and access rules • Associated policies and restrictions • User/group assignments and mappings • Resource access configurations • Audit and compliance information USE CASES: • Security audits and compliance reporting • Access permission troubleshooting • Role-based access control planning • Identity and access management (IAM) integration • Permission inheritance analysis Example: Check what permissions the 'database-admin' role has |
| manage_rotation_settingsC | ROTATION SETTINGS MANAGEMENT TOOL - Automate secret and key rotation for security compliance SUPPORTED ACTIONS: • set_rotation: Set rotation settings for secrets and keys with scheduling • update_settings: Update existing rotation configurations and parameters • list_rotation: List items with rotation settings and status • get_rotation_status: Get detailed rotation status and history information ROTATION FEATURES: • Auto-rotation with configurable intervals (7-365 days) • Rotation event notifications and scheduling • Advanced rotation windows and cron-based scheduling • Rotate after disconnect settings for security • Comprehensive rotation status tracking and reporting SECURITY BENEFITS: • Automated security through intelligent rotation scheduling • Enterprise-grade rotation with access control and audit trails • Compliance with security policies and regulations • Reduced manual intervention and human error • Proactive security through regular credential updates Example: Set up automated rotation for database credentials every 30 days |
| manage_secretsB | SECRETS MANAGEMENT TOOL - Create, retrieve, update, and delete secrets SUPPORTED ACTIONS:
• create_static_secret: Create text/JSON secrets with metadata
• get_static_secret_value: Retrieve secret values securely DELETE OPERATIONS: • Individual: delete(name="/secret1") • Multiple: delete_items(items=["/secret1", "/secret2"]) • Directory: delete_items(path="/directory/") Example: Create a database password secret |
| manage_targetsB | TARGET MANAGEMENT TOOL - Manage external system connections and integrations SUPPORTED ACTIONS: • list: Discover all configured targets with filtering • get: Retrieve detailed target configuration and credentials • create: Create new database or LDAP targets • delete: Delete individual target with version control • delete_targets: Bulk delete targets within a specific path SUPPORTED TARGET TYPES: • Database: MySQL, PostgreSQL, MSSQL, Oracle, Snowflake, MongoDB, Cassandra, HanaDB, Redshift, Redis • LDAP: OpenLDAP, Active Directory • Cloud: AWS, Azure, GCP Example: Create a MySQL database target for application connections |
| security_guidelinesA | SECURITY GUIDELINES TOOL - Comprehensive security guidance and compliance management SUPPORTED ACTIONS: • get_guidelines: Get security best practices and guidelines by category • validate: Validate secrets and configurations for security compliance • audit: Perform comprehensive security audits and assessments • compliance_check: Check compliance with industry standards (SOC2, ISO27001, GDPR, HIPAA) SECURITY CATEGORIES: • best_practices: Security best practices and recommendations • compliance: Compliance frameworks and requirements • audit: Security audit procedures and checklists • encryption: Encryption standards and key management COMPLIANCE STANDARDS: • SOC2: Service Organization Control 2 compliance • ISO27001: Information security management systems • GDPR: General Data Protection Regulation • HIPAA: Health Insurance Portability and Accountability Act SECURITY FEATURES: • Enterprise-grade security with access control and audit trails • Automated security validation and compliance checking • Comprehensive audit procedures and reporting • Industry-standard compliance framework support Example: Perform security audit and compliance check for SOC2 requirements |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| get_account_summary | Get comprehensive account summary from Akeyless vault. |
| get_account_analytics | Get comprehensive analytics and monitoring data from Akeyless vault. |
| create_auth_api_key | Create a new API key authentication method in Akeyless vault. |
| create_auth_email | Create a new email-based authentication method in Akeyless vault. |
| develop_or_secure_app | Intelligently develop a new app or secure an existing app with CipherTrust integration. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/sanyambassi/thales-cdsp-csm-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server