Skip to main content
Glama
sanyambassi

thales-cdsp-csm-mcp-server

by sanyambassi

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
LOG_LEVELNoLog levelINFO
AKEYLESS_API_URLYesURL of the CipherTrust Manager Akeyless API
AKEYLESS_ACCESS_IDYesYour Akeyless access ID
AKEYLESS_ACCESS_KEYYesYour Akeyless access key
AKEYLESS_VERIFY_SSLNoWhether to verify SSLfalse

Capabilities

Features and capabilities supported by this server

CapabilityDetails
tools
{
  "listChanged": true
}
logging
{}
prompts
{
  "listChanged": false
}
resources
{
  "subscribe": false,
  "listChanged": false
}
extensions
{
  "io.modelcontextprotocol/ui": {}
}
experimental
{}

Tools

Functions exposed to the LLM to take actions

NameDescription
get_api_referenceA

API REFERENCE TOOL - Generate production-ready code examples and integration patterns

SUPPORTED ENDPOINTS: • workflow: Complete integration patterns and best practices • auth: Authentication flows and token management • create-secret: Secret creation and management APIs • get-secret-value: Secret retrieval and access patterns • list-items: Item listing and discovery APIs • delete-item: Item deletion and cleanup operations • list-roles: Role management and access control • list-targets: Target management and configuration

INTEGRATION FEATURES: • Production-ready code examples with authentication • Complete error handling and retry logic • Best practices for secure integration patterns • Multi-language support (Python, JavaScript, etc.) • Token management and session handling

USE CASES: • Building custom applications and integrations • CI/CD pipeline integration and automation • Microservice authentication and configuration • Native client development and SDK creation • Production system integration and deployment

Example: Generate complete Python client code for secret management

manage_accountA

ACCOUNT ADMINISTRATION TOOL - Manage organizational settings and governance

SUPPORTED ACTIONS: • get: Retrieve complete account configuration, licensing details, and system-wide policies

ACCOUNT INFORMATION PROVIDED: • Organizational details and company profile • Licensing and subscription tier information • Service tier, SLA level, and feature availability • Usage quotas, capacity limits, and billing details • System configuration and security policies • Governance, compliance, and audit settings • Multi-tenant configuration and access controls

USE CASES: • Account setup and initial configuration • Compliance and audit preparation • License management and planning • Security policy review and updates • Service tier evaluation and upgrades • Multi-tenant administration

Example: Review account licensing and compliance configuration

manage_analyticsA

ANALYTICS & MONITORING TOOL - Comprehensive infrastructure monitoring and reporting

SUPPORTED ACTIONS: • get: Retrieve comprehensive monitoring data, usage statistics, and performance metrics

ANALYTICS COVERAGE: • Usage statistics and item counts by type (Secrets, Targets, Roles, Keys) • Geographic distribution of access requests and client patterns • Security risk analysis and certificate expiry tracking • Authentication method usage and access control compliance • Multi-region usage distribution and product-specific metrics • Resource utilization, capacity planning, and audit summaries

FILTERING OPTIONS: • Filter by item type (Targets, Static Secrets, Dynamic Secrets, DFC Keys, etc.) • Filter by risk level (Expired, Healthy, Expiring Soon certificates) • Filter by product component (Secrets Management, Advanced Data Protection, etc.)

USE CASES: • Security operations center (SOC) dashboards • Compliance reporting and audit preparation • Capacity planning and resource optimization • Risk assessment and vulnerability management • Executive reporting and KPI tracking

Example: Get security risk analysis for certificate expiry management

manage_auth_methodsA

AUTHENTICATION METHODS MANAGEMENT TOOL - Create, manage, and secure authentication methods

SUPPORTED ACTIONS: • create_api_key: Create API key authentication methods with IP restrictions and expiration • create_email: Create email-based authentication methods with MFA support • list: List all authentication methods with filtering and pagination • get: Retrieve detailed authentication method configuration and status • update: Modify authentication method properties, credentials, and settings • delete: Delete individual authentication methods with proper cleanup • delete_auth_methods: Bulk delete authentication methods within a specific path

SECURITY FEATURES: • IP address restrictions and CIDR whitelisting • Access expiration and JWT TTL management • Multi-factor authentication (MFA) support • Audit logging and compliance tracking • Delete protection and access control

Example: Create a secure API key for application authentication

manage_customer_fragmentsA

CUSTOMER FRAGMENT MANAGEMENT TOOL - Manage customer fragment encryption and security

SUPPORTED ACTIONS: • list: List customer fragments with path filtering and pattern matching • export: Export customer fragments with optional JSON format • download: Download customer fragments (alias for export action)

SECURITY FEATURES: • Customer fragment encryption for enhanced security • Access control and audit trails • Enterprise-grade fragment management • Compliance and security reporting

USE CASES: • Customer fragment inventory and management • Security compliance and audit preparation • Fragment backup and export operations • Enhanced encryption key management

Example: List and export customer fragments for security audit

manage_dfc_keysA

DFC KEY MANAGEMENT TOOL - Advanced encryption key management and lifecycle

SUPPORTED ACTIONS: • create: Create new DFC keys with encryption algorithms (AES128GCM, AES256GCM, RSA2048, etc.) • update: Modify DFC key properties, tags, and metadata • delete: Delete DFC keys with proper cleanup • list: List DFC keys in directory with filtering • set_state: Enable/disable DFC keys for access control • rotate: Rotate DFC keys on demand with new certificates and key data

ADVANCED FEATURES: • Auto-rotation with configurable intervals (7-365 days) • Customer fragment encryption for enhanced security • Self-signed certificate generation with X.509 support • Split levels (3 or 4 fragments) for key distribution • Expiration and rotation event notifications • Comprehensive metadata and configuration support

SECURITY CAPABILITIES: • Enterprise-grade key management with audit trails • Access control and delete protection • Customer fragment integration • Certificate lifecycle management • Compliance and governance reporting

Example: Create an AES256GCM DFC key with auto-rotation for application encryption

manage_gatewaysB

GATEWAY MANAGEMENT TOOL - Monitor and manage gateway infrastructure

SUPPORTED ACTIONS: • list: List available gateways with detailed information and filtering

GATEWAY INFORMATION PROVIDED: • Gateway configuration and status • Connection details and endpoints • Performance metrics and health status • Access control and security settings • Integration and routing information

USE CASES: • Gateway infrastructure monitoring • Connection troubleshooting and diagnostics • Performance analysis and optimization • Security configuration review • Gateway inventory and management

Example: List all gateways to monitor infrastructure health

manage_rolesA

ROLE MANAGEMENT TOOL - Discover and analyze role-based access control

SUPPORTED ACTIONS: • list: Discover all roles with advanced filtering and pagination • get: Retrieve comprehensive role details including permissions, access rules, and policies

ROLE INFORMATION PROVIDED: • Permission sets and access rules • Associated policies and restrictions • User/group assignments and mappings • Resource access configurations • Audit and compliance information

USE CASES: • Security audits and compliance reporting • Access permission troubleshooting • Role-based access control planning • Identity and access management (IAM) integration • Permission inheritance analysis

Example: Check what permissions the 'database-admin' role has

manage_rotation_settingsC

ROTATION SETTINGS MANAGEMENT TOOL - Automate secret and key rotation for security compliance

SUPPORTED ACTIONS: • set_rotation: Set rotation settings for secrets and keys with scheduling • update_settings: Update existing rotation configurations and parameters • list_rotation: List items with rotation settings and status • get_rotation_status: Get detailed rotation status and history information

ROTATION FEATURES: • Auto-rotation with configurable intervals (7-365 days) • Rotation event notifications and scheduling • Advanced rotation windows and cron-based scheduling • Rotate after disconnect settings for security • Comprehensive rotation status tracking and reporting

SECURITY BENEFITS: • Automated security through intelligent rotation scheduling • Enterprise-grade rotation with access control and audit trails • Compliance with security policies and regulations • Reduced manual intervention and human error • Proactive security through regular credential updates

Example: Set up automated rotation for database credentials every 30 days

manage_secretsB

SECRETS MANAGEMENT TOOL - Create, retrieve, update, and delete secrets

SUPPORTED ACTIONS: • create_static_secret: Create text/JSON secrets with metadata • get_static_secret_value: Retrieve secret values securely
• update: Modify secret properties and values • delete: Delete individual secrets (smart detection) • delete_items: Bulk delete multiple secrets or directories • list: List secrets in directory with type filtering • list_dynamic_secrets: List all dynamic secrets globally • create_dynamic_secret_ldap: Create LDAP dynamic secrets • create_dynamic_secret_mysql: Create MySQL dynamic secrets • create_dynamic_secret_mongodb: Create MongoDB dynamic secrets • list_shared_items: List shared secrets and items

DELETE OPERATIONS: • Individual: delete(name="/secret1") • Multiple: delete_items(items=["/secret1", "/secret2"]) • Directory: delete_items(path="/directory/")

Example: Create a database password secret

manage_targetsB

TARGET MANAGEMENT TOOL - Manage external system connections and integrations

SUPPORTED ACTIONS: • list: Discover all configured targets with filtering • get: Retrieve detailed target configuration and credentials • create: Create new database or LDAP targets • delete: Delete individual target with version control • delete_targets: Bulk delete targets within a specific path

SUPPORTED TARGET TYPES: • Database: MySQL, PostgreSQL, MSSQL, Oracle, Snowflake, MongoDB, Cassandra, HanaDB, Redshift, Redis • LDAP: OpenLDAP, Active Directory • Cloud: AWS, Azure, GCP

Example: Create a MySQL database target for application connections

security_guidelinesA

SECURITY GUIDELINES TOOL - Comprehensive security guidance and compliance management

SUPPORTED ACTIONS: • get_guidelines: Get security best practices and guidelines by category • validate: Validate secrets and configurations for security compliance • audit: Perform comprehensive security audits and assessments • compliance_check: Check compliance with industry standards (SOC2, ISO27001, GDPR, HIPAA)

SECURITY CATEGORIES: • best_practices: Security best practices and recommendations • compliance: Compliance frameworks and requirements • audit: Security audit procedures and checklists • encryption: Encryption standards and key management

COMPLIANCE STANDARDS: • SOC2: Service Organization Control 2 compliance • ISO27001: Information security management systems • GDPR: General Data Protection Regulation • HIPAA: Health Insurance Portability and Accountability Act

SECURITY FEATURES: • Enterprise-grade security with access control and audit trails • Automated security validation and compliance checking • Comprehensive audit procedures and reporting • Industry-standard compliance framework support

Example: Perform security audit and compliance check for SOC2 requirements

Prompts

Interactive templates invoked by user choice

NameDescription
get_account_summaryGet comprehensive account summary from Akeyless vault.
get_account_analyticsGet comprehensive analytics and monitoring data from Akeyless vault.
create_auth_api_keyCreate a new API key authentication method in Akeyless vault.
create_auth_emailCreate a new email-based authentication method in Akeyless vault.
develop_or_secure_appIntelligently develop a new app or secure an existing app with CipherTrust integration.

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/sanyambassi/thales-cdsp-csm-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server