thales-cdsp-csm-mcp-server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| LOG_LEVEL | No | Log level | INFO |
| AKEYLESS_API_URL | Yes | URL of the CipherTrust Manager Akeyless API | |
| AKEYLESS_ACCESS_ID | Yes | Your Akeyless access ID | |
| AKEYLESS_ACCESS_KEY | Yes | Your Akeyless access key | |
| AKEYLESS_VERIFY_SSL | No | Whether to verify SSL | false |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| logging | {} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| extensions | {
"io.modelcontextprotocol/ui": {}
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| get_api_referenceA | API REFERENCE TOOL - Generate production-ready code examples and integration patterns SUPPORTED ENDPOINTS: • workflow: Complete integration patterns and best practices • auth: Authentication flows and token management • create-secret: Secret creation and management APIs • get-secret-value: Secret retrieval and access patterns • list-items: Item listing and discovery APIs • delete-item: Item deletion and cleanup operations • list-roles: Role management and access control • list-targets: Target management and configuration INTEGRATION FEATURES: • Production-ready code examples with authentication • Complete error handling and retry logic • Best practices for secure integration patterns • Multi-language support (Python, JavaScript, etc.) • Token management and session handling USE CASES: • Building custom applications and integrations • CI/CD pipeline integration and automation • Microservice authentication and configuration • Native client development and SDK creation • Production system integration and deployment Example: Generate complete Python client code for secret management |
| manage_accountA | ACCOUNT ADMINISTRATION TOOL - Manage organizational settings and governance SUPPORTED ACTIONS: • get: Retrieve complete account configuration, licensing details, and system-wide policies ACCOUNT INFORMATION PROVIDED: • Organizational details and company profile • Licensing and subscription tier information • Service tier, SLA level, and feature availability • Usage quotas, capacity limits, and billing details • System configuration and security policies • Governance, compliance, and audit settings • Multi-tenant configuration and access controls USE CASES: • Account setup and initial configuration • Compliance and audit preparation • License management and planning • Security policy review and updates • Service tier evaluation and upgrades • Multi-tenant administration Example: Review account licensing and compliance configuration |
| manage_analyticsA | ANALYTICS & MONITORING TOOL - Comprehensive infrastructure monitoring and reporting SUPPORTED ACTIONS: • get: Retrieve comprehensive monitoring data, usage statistics, and performance metrics ANALYTICS COVERAGE: • Usage statistics and item counts by type (Secrets, Targets, Roles, Keys) • Geographic distribution of access requests and client patterns • Security risk analysis and certificate expiry tracking • Authentication method usage and access control compliance • Multi-region usage distribution and product-specific metrics • Resource utilization, capacity planning, and audit summaries FILTERING OPTIONS: • Filter by item type (Targets, Static Secrets, Dynamic Secrets, DFC Keys, etc.) • Filter by risk level (Expired, Healthy, Expiring Soon certificates) • Filter by product component (Secrets Management, Advanced Data Protection, etc.) USE CASES: • Security operations center (SOC) dashboards • Compliance reporting and audit preparation • Capacity planning and resource optimization • Risk assessment and vulnerability management • Executive reporting and KPI tracking Example: Get security risk analysis for certificate expiry management |
| manage_auth_methodsA | AUTHENTICATION METHODS MANAGEMENT TOOL - Create, manage, and secure authentication methods SUPPORTED ACTIONS: • create_api_key: Create API key authentication methods with IP restrictions and expiration • create_email: Create email-based authentication methods with MFA support • list: List all authentication methods with filtering and pagination • get: Retrieve detailed authentication method configuration and status • update: Modify authentication method properties, credentials, and settings • delete: Delete individual authentication methods with proper cleanup • delete_auth_methods: Bulk delete authentication methods within a specific path SECURITY FEATURES: • IP address restrictions and CIDR whitelisting • Access expiration and JWT TTL management • Multi-factor authentication (MFA) support • Audit logging and compliance tracking • Delete protection and access control Example: Create a secure API key for application authentication |
| manage_customer_fragmentsA | CUSTOMER FRAGMENT MANAGEMENT TOOL - Manage customer fragment encryption and security SUPPORTED ACTIONS: • list: List customer fragments with path filtering and pattern matching • export: Export customer fragments with optional JSON format • download: Download customer fragments (alias for export action) SECURITY FEATURES: • Customer fragment encryption for enhanced security • Access control and audit trails • Enterprise-grade fragment management • Compliance and security reporting USE CASES: • Customer fragment inventory and management • Security compliance and audit preparation • Fragment backup and export operations • Enhanced encryption key management Example: List and export customer fragments for security audit |
| manage_dfc_keysA | DFC KEY MANAGEMENT TOOL - Advanced encryption key management and lifecycle SUPPORTED ACTIONS: • create: Create new DFC keys with encryption algorithms (AES128GCM, AES256GCM, RSA2048, etc.) • update: Modify DFC key properties, tags, and metadata • delete: Delete DFC keys with proper cleanup • list: List DFC keys in directory with filtering • set_state: Enable/disable DFC keys for access control • rotate: Rotate DFC keys on demand with new certificates and key data ADVANCED FEATURES: • Auto-rotation with configurable intervals (7-365 days) • Customer fragment encryption for enhanced security • Self-signed certificate generation with X.509 support • Split levels (3 or 4 fragments) for key distribution • Expiration and rotation event notifications • Comprehensive metadata and configuration support SECURITY CAPABILITIES: • Enterprise-grade key management with audit trails • Access control and delete protection • Customer fragment integration • Certificate lifecycle management • Compliance and governance reporting Example: Create an AES256GCM DFC key with auto-rotation for application encryption |
| manage_gatewaysB | GATEWAY MANAGEMENT TOOL - Monitor and manage gateway infrastructure SUPPORTED ACTIONS: • list: List available gateways with detailed information and filtering GATEWAY INFORMATION PROVIDED: • Gateway configuration and status • Connection details and endpoints • Performance metrics and health status • Access control and security settings • Integration and routing information USE CASES: • Gateway infrastructure monitoring • Connection troubleshooting and diagnostics • Performance analysis and optimization • Security configuration review • Gateway inventory and management Example: List all gateways to monitor infrastructure health |
| manage_rolesA | ROLE MANAGEMENT TOOL - Discover and analyze role-based access control SUPPORTED ACTIONS: • list: Discover all roles with advanced filtering and pagination • get: Retrieve comprehensive role details including permissions, access rules, and policies ROLE INFORMATION PROVIDED: • Permission sets and access rules • Associated policies and restrictions • User/group assignments and mappings • Resource access configurations • Audit and compliance information USE CASES: • Security audits and compliance reporting • Access permission troubleshooting • Role-based access control planning • Identity and access management (IAM) integration • Permission inheritance analysis Example: Check what permissions the 'database-admin' role has |
| manage_rotation_settingsC | ROTATION SETTINGS MANAGEMENT TOOL - Automate secret and key rotation for security compliance SUPPORTED ACTIONS: • set_rotation: Set rotation settings for secrets and keys with scheduling • update_settings: Update existing rotation configurations and parameters • list_rotation: List items with rotation settings and status • get_rotation_status: Get detailed rotation status and history information ROTATION FEATURES: • Auto-rotation with configurable intervals (7-365 days) • Rotation event notifications and scheduling • Advanced rotation windows and cron-based scheduling • Rotate after disconnect settings for security • Comprehensive rotation status tracking and reporting SECURITY BENEFITS: • Automated security through intelligent rotation scheduling • Enterprise-grade rotation with access control and audit trails • Compliance with security policies and regulations • Reduced manual intervention and human error • Proactive security through regular credential updates Example: Set up automated rotation for database credentials every 30 days |
| manage_secretsB | SECRETS MANAGEMENT TOOL - Create, retrieve, update, and delete secrets SUPPORTED ACTIONS:
• create_static_secret: Create text/JSON secrets with metadata
• get_static_secret_value: Retrieve secret values securely DELETE OPERATIONS: • Individual: delete(name="/secret1") • Multiple: delete_items(items=["/secret1", "/secret2"]) • Directory: delete_items(path="/directory/") Example: Create a database password secret |
| manage_targetsB | TARGET MANAGEMENT TOOL - Manage external system connections and integrations SUPPORTED ACTIONS: • list: Discover all configured targets with filtering • get: Retrieve detailed target configuration and credentials • create: Create new database or LDAP targets • delete: Delete individual target with version control • delete_targets: Bulk delete targets within a specific path SUPPORTED TARGET TYPES: • Database: MySQL, PostgreSQL, MSSQL, Oracle, Snowflake, MongoDB, Cassandra, HanaDB, Redshift, Redis • LDAP: OpenLDAP, Active Directory • Cloud: AWS, Azure, GCP Example: Create a MySQL database target for application connections |
| security_guidelinesA | SECURITY GUIDELINES TOOL - Comprehensive security guidance and compliance management SUPPORTED ACTIONS: • get_guidelines: Get security best practices and guidelines by category • validate: Validate secrets and configurations for security compliance • audit: Perform comprehensive security audits and assessments • compliance_check: Check compliance with industry standards (SOC2, ISO27001, GDPR, HIPAA) SECURITY CATEGORIES: • best_practices: Security best practices and recommendations • compliance: Compliance frameworks and requirements • audit: Security audit procedures and checklists • encryption: Encryption standards and key management COMPLIANCE STANDARDS: • SOC2: Service Organization Control 2 compliance • ISO27001: Information security management systems • GDPR: General Data Protection Regulation • HIPAA: Health Insurance Portability and Accountability Act SECURITY FEATURES: • Enterprise-grade security with access control and audit trails • Automated security validation and compliance checking • Comprehensive audit procedures and reporting • Industry-standard compliance framework support Example: Perform security audit and compliance check for SOC2 requirements |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| get_account_summary | Get comprehensive account summary from Akeyless vault. |
| get_account_analytics | Get comprehensive analytics and monitoring data from Akeyless vault. |
| create_auth_api_key | Create a new API key authentication method in Akeyless vault. |
| create_auth_email | Create a new email-based authentication method in Akeyless vault. |
| develop_or_secure_app | Intelligently develop a new app or secure an existing app with CipherTrust integration. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/sanyambassi/thales-cdsp-csm-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server