pkinative MCP — X.509, CMS, OCSP, time-stamps and PKCS#12 without a key byte leaving

io.github.Nizoka/pkinative-mcp

PKI MCP server: inspect, verify, issue, sign X.509, CSR, CRL, OCSP, CMS, TSP, PKCS#12. 34 tools

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "pkinative-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "pkinative-mcp@1.0.0"
      ],
      "env": {
        "PKINATIVE_MCP_HTTP_TOKEN": "<your PKINATIVE_MCP_HTTP_TOKEN>",
        "PKINATIVE_MCP_PASSWORD": "<your PKINATIVE_MCP_PASSWORD>"
      }
    }
  }
}
Environment variables
  • PKINATIVE_MCP_HTTP_TOKENsecretOpt-in bearer token for the HTTP transport (>= 16 chars, no whitespace; a weaker value refuses to start). When set, /mcp requires 'Authorization: Bearer <token>' or answers 401. Compared constant-time, never logged.
  • PKINATIVE_MCP_PASSWORDsecretOperator-side password of the encrypted PKCS#8 key or PKCS#12 file the tools open (keeps the secret out of the model transcript). Exclusive with the per-call password input (both at once is VALIDATION_ERROR). Never logged; only its presence is reported at startup.

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
1.0.0
Registry
active
Published
10/17/2026
Browse all Developer Tools →

Add the badge to your site

Show visitors that pkinative MCP — X.509, CMS, OCSP, time-stamps and PKCS#12 without a key byte leaving is listed here — it’s also the link we check for a free listing.

pkinative MCP — X.509, CMS, OCSP, time-stamps and PKCS#12 without a key byte leaving — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-nizoka-pkinative-mcp?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="pkinative MCP — X.509, CMS, OCSP, time-stamps and PKCS#12 without a key byte leaving — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![pkinative MCP — X.509, CMS, OCSP, time-stamps and PKCS#12 without a key byte leaving — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-nizoka-pkinative-mcp?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.