io.github.Nizoka/pkinative-mcp

9 of 34 tools are described as changing something (creating, editing, deleting, sending or running). For 1 the reading was uncertain, so no mark is shown.

• convert_pemcalculates or converts

  “The RFC 7468 layer.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world no

  13 inputs, 2 required

  • modestringrequired“'decode' lists the blocks of a PEM text (and extracts one with extractIndex); 'encode' wraps DER bytes into one PEM block.”
  • inputobjectrequired“The PEM text (decode: pem or a path to a PEM file) or the DER bytes (encode: derBase64 or a path to a DER file): exactly one of pem / derBase64 / path.”
  • labelstring“decode: list only the blocks with this label.”
  • extractIndexinteger“decode: also deliver the block with this index (its position in the text, as listed) as an artefact in `encoding`.”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • verbositystring“'summary' keeps the scalar fields only (token-frugal).”
  • fieldsarray“Dot-paths to keep after verbosity (arrays map over elements); unmatched paths land in _meta.unmatchedFields.”
  • outputModestring“'base64' (default) returns the artefact inline as an embedded resource (≤ 50 MiB).”
  • outputPathstring“Relative path inside the sandbox (only when outputMode='file'); the extension must match the encoding (.der .crt .cer .csr .crl .p7s .bin … for der; .pem for p…”
  • encodingstring“Artefact encoding.”
• resolve_oid

  “Object identifiers in one call.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  15 inputs, 1 required

  • modestringrequired“'name' (registered names), 'validate' (X.660 validity), 'list' (the registry, paged), 'encode' (dotted → hex), 'decode' (hex → dotted + name).”
  • oidsarray“name / validate / encode: the dotted OIDs (≤ 1000).”
  • filterstring“list: case-insensitive substring of the name or the dotted OID.”
  • offsetinteger“list: first entry returned.”
  • limitinteger“list: page size (≤ 2000).”
  • formstring“encode / decode: 'content' (the base-128 content octets only) or 'tlv' (tag + length + content, i.e.”
  • relativeboolean“encode / decode: a RELATIVE-OID (X.690 §8.20, universal tag 13) instead of an OBJECT IDENTIFIER — needs form:'tlv' (the engine encodes a relative OID as a whol…”
  • hexstring“decode: the octets to decode (content octets, or the whole TLV with form:'tlv').”
  • inputobject“decode: the encoded OBJECT IDENTIFIER as a whole DER TLV (or any PEM block holding one): exactly one of pem / derBase64 / path.”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • verbositystring“'summary' keeps the scalar fields only (token-frugal).”
  • fieldsarray“Dot-paths to keep after verbosity (arrays map over elements); unmatched paths land in _meta.unmatchedFields.”
• compute_fingerprinton 2 other serverscalculates or converts

  “Read-only digest of ONE object.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  13 inputs, 1 required

  • inputobjectrequired“The object to digest (any PEM label, or DER): exactly one of pem / derBase64 / path.”
  • modestring“'fingerprint' (default): the digest of the exact DER.”
  • algorithmstring“fingerprint: SHA-1 | SHA-256 (default) | SHA-384 | SHA-512.”
  • webcryptoboolean“fingerprint only: digest through Web Crypto instead of the pure-TypeScript hashes (identical result).”
  • outputLengthinteger“shake256 only: output bytes (default 32, ≤ 1048576; 64 for an Ed448 CMS signer).”
  • separatorstring“Placed between octets of `formatted` (default ':'; '' for none).”
  • letterCasestring“Hex case of `formatted` (`hex` is always lowercase).”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • verbositystring“'summary' keeps the scalar fields only (token-frugal).”
  • fieldsarray“Dot-paths to keep after verbosity (arrays map over elements); unmatched paths land in _meta.unmatchedFields.”
• decode_asn1calculates or converts

  “Read-only X.690 view of any DER object (BER with encodingRules:'ber'): the node tree — offset, header and content lengths, tag class / number / name, constructed flag, child count, a hex preview of e…”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  19 inputs, 1 required

  • inputobjectrequired“The DER / BER object (any PEM label except a private key, or DER): exactly one of pem / derBase64 / path.”
  • sequenceboolean“The input is several top-level values back to back: decode each (exclusive with nodePath / read / reencode).”
  • nodePathstring“Child indices from the root, dot-separated ('0.2.1' = children[0].children[2].children[1]): the subtree listed, read or re-encoded.”
  • readstring“Apply this typed reader to the selected node (the root without nodePath) and return `value`; a wrong tag is PKI_ASN1_UNEXPECTED_TAG.”
  • stringTypestring“read:'string' on an IMPLICIT-tagged node: the charset to decode with (required then — PKI_API_MISUSE otherwise).”
  • timeTypestring“read:'time' on an IMPLICIT-tagged node: the time type (required then).”
  • reencodeboolean“Re-encode the selected node through the engine encoder and deliver it as an artefact (`encoding` der by default, hex, or pem under the input label or `label`);…”
  • labelstring“reencode + encoding:'pem': the PEM label of the artefact (required when the input had no label or nodePath selects a sub-node; upper-case words and digits).”
  • allowTrailingDataboolean“Accept bytes after the outermost value instead of PKI_ASN1_TRAILING_DATA (single value only; sequence:true decodes them instead).”
  • maxPreviewBytesinteger“Content bytes of a primitive shown in `preview` (hex; 0 hides previews; default 32).”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • verbositystring“'summary' keeps the scalar fields only (token-frugal).”
  • fieldsarray“Dot-paths to keep after verbosity (arrays map over elements); unmatched paths land in _meta.unmatchedFields.”
  • outputModestring“'base64' (default) returns the artefact inline as an embedded resource (≤ 50 MiB).”
  • outputPathstring“Relative path inside the sandbox (only when outputMode='file'); the extension must match the encoding (.der .bin .asn1 for der; .pem for pem).”
  • encodingstring“Artefact encoding: 'pem' (RFC 7468 text), 'der' (raw bytes), 'hex' (lowercase hex in structuredContent, inline only, ≤ 64 KiB).”
• encode_asn1calculates or converts

  “Encode a JSON node spec into DER through the engine's own encoders: `spec` is one node { type, … } — boolean (value), integer / enumerated (value: integer, decimal or 0x-hex string, negative allowed)…”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world no

  9 inputs, 1 required

  • specobjectrequired“An ASN.1 node spec: { type, … } with type one of boolean (value), integer / enumerated (value: integer or decimal / 0x-hex string), null, bit-string (hex, unus…”
  • labelstring“The PEM label for encoding:'pem' (required then; upper-case words and digits).”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • outputModestring“'base64' (default) returns the artefact inline as an embedded resource (≤ 50 MiB).”
  • outputPathstring“Relative path inside the sandbox (only when outputMode='file'); the extension must match the encoding (.der .bin .asn1 for der; .pem for pem).”
  • encodingstring“Artefact encoding: 'pem' (RFC 7468 text), 'der' (raw bytes), 'hex' (lowercase hex in structuredContent, inline only, ≤ 64 KiB).”
• inspect_certificatereads or searches

  “Read-only RFC 5280 report of ONE certificate in one call: version, serial, signature algorithm, issuer and subject (RFC 4514 + RDNs), validity (epoch ms + ISO), public key (kind, bits, curve / modulu…”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  14 inputs, 1 required

  • certificateobjectrequired“The certificate (CERTIFICATE PEM or DER): exactly one of pem / derBase64 / path.”
  • extensionstring“Return only this decoded extension (NOT_FOUND when absent).”
  • rawExtensionsboolean“Keep every extension undecoded (kind raw, valueDer as hex) — the way past PKI_X509_EXTENSION_MALFORMED.”
  • issuerobject“The issuer certificate to check the signature against: exactly one of pem / derBase64 / path.”
  • checkSelfSignatureboolean“Check the certificate against its own key (a self-signed root).”
  • requireAlgorithmMatchboolean“Require the outer signatureAlgorithm to equal the TBS signature algorithm (RFC 5280 §4.1.1.2).”
  • fingerprintsarray“Digests of the DER to report.”
  • allowSha1boolean“Accept or produce SHA-1 signatures (legacy material you already trust).”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • verbositystring“'summary' keeps the scalar fields only (token-frugal).”
  • fieldsarray“Dot-paths to keep after verbosity (arrays map over elements); unmatched paths land in _meta.unmatchedFields.”
• create_certificateon 2 other serverscreates or changes datadescribed as changing data

  “Issue an X.509 v3 certificate from `spec` (subject, validity, extensions — basicConstraints, keyUsage, extendedKeyUsage, subjectAltName, issuerAltName, SKI / AKI, raw), signed through `signer` (a PKC…”

  Publisher declares: read-only no · destructive no · idempotent no · open-world no

  12 inputs, 2 required

  • specobjectrequired“What to write into the certificate.”
  • issuerCertificateobject“The issuing CA certificate: exactly one of pem / derBase64 / path.”
  • subjectPublicKeyobject“The subject public key: a certificate, a CSR (CERTIFICATE REQUEST) or a PUBLIC KEY (SPKI): exactly one of pem / derBase64 / path.”
  • signerobjectrequired“The signing key: exactly one of `key` (a PKCS#8 private key, plain or PBES2-encrypted, PEM or DER) or `p12` (a PKCS#12 file, PBES2 + PBMAC1 only).”
  • allowSha1boolean“Accept or produce SHA-1 signatures (legacy material you already trust).”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • outputModestring“'base64' (default) returns the artefact inline as an embedded resource (≤ 50 MiB).”
  • outputPathstring“Relative path inside the sandbox (only when outputMode='file'); the extension must match the encoding (.pem for pem; .crt .cer .der for der).”
  • encodingstring“Artefact encoding: 'pem' (RFC 7468 text), 'der' (raw bytes), 'hex' (lowercase hex in structuredContent, inline only, ≤ 64 KiB).”
• encode_x509_structurecreates or changes datadescribed as changing data

  “Encode ONE X.509 building block to DER through pkinative's structural encoders, deterministically (the same spec gives the same bytes): `structure` is name, name-attribute, validity, spki, algorithm-…”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world no

  12 inputs, 1 required

  • structurestringrequired“The X.509 building block to encode.”
  • specobject or array“The structure's members (a closed object; an unknown member is refused with VALIDATION_ERROR naming it).”
  • signerobject“signature-algorithm only: The signing key: exactly one of `key` (a PKCS#8 private key, plain or PBES2-encrypted, PEM or DER) or `p12` (a PKCS#12 file, PBES2 + …”
  • labelstring“The RFC 7468 label for encoding:'pem' (required then, refused otherwise); a key-bearing label is refused.”
  • allowSha1boolean“Accept or produce SHA-1 signatures (legacy material you already trust).”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • outputModestring“'base64' (default) returns the artefact inline as an embedded resource (≤ 50 MiB).”
  • outputPathstring“Relative path inside the sandbox (only when outputMode='file'); the extension must match the encoding (.der .bin .asn1 for der; .pem for pem).”
  • encodingstring“Artefact encoding: 'pem' (RFC 7468 text), 'der' (raw bytes), 'hex' (lowercase hex in structuredContent, inline only, ≤ 64 KiB).”
• decode_extensionreads or searches

  “Read-only decode of ONE X.509 extension value by its OID — the bytes INSIDE extnValue's OCTET STRING, as `valueHex` or `value` (DER by derBase64 / sandbox path) — exactly as inspect_certificate decod…”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  10 inputs, 1 required

  • oidstringrequired“The extension OID (2.5.29.19 basicConstraints, 2.5.29.17 subjectAltName, …) — it selects the decoder.”
  • valueHexstring“The extnValue content (the DER inside the OCTET STRING) as hex.”
  • valueobject“The extnValue content as DER bytes (derBase64, or a sandbox .der / .bin / .asn1 file): exactly one of pem / derBase64 / path.”
  • criticalboolean“The criticality to report and to check against the kind (a kind RFC 5280 requires critical or non-critical gets a diagnostic).”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • verbositystring“'summary' keeps the scalar fields only (token-frugal).”
  • fieldsarray“Dot-paths to keep after verbosity (arrays map over elements); unmatched paths land in _meta.unmatchedFields.”
• check_certificate_namereads or searches

  “The RFC 6125 identity verdict, two forms.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  14 inputs

  • certificateobject“The certificate to judge (certificate form): exactly one of pem / derBase64 / path.”
  • hoststring“The reference DNS name as it appeared in the URL (one trailing dot is ignored).”
  • ipstring“The reference IPv4 or IPv6 address.”
  • chainarray“The issuing certificates, leaf's issuer first (every PEM block of every item is taken).”
  • allowCommonNameFallbackboolean“Fall back to the subject commonName when the certificate carries no dNSName and no iPAddress (CA/Browser Forum forbids CN-only certificates since 2017; needs c…”
  • allowWildcardsboolean“Accept a wildcard name (*.example.test) at all.”
  • presentedstring“Match form: the certificate's dNSName, possibly a wildcard.”
  • referencestring“Match form: the reference host name.”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • verbositystring“'summary' keeps the scalar fields only (token-frugal).”
  • fieldsarray“Dot-paths to keep after verbosity (arrays map over elements); unmatched paths land in _meta.unmatchedFields.”
• check_certificate_purposereads or searches

  “The RFC 5280 §4.2.1.12 purpose verdict: may `certificate` be used for `purpose` (serverAuth, clientAuth, codeSigning, emailProtection, timeStamping, ocspSigning, any, or a dotted KeyPurposeId OID)?”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  11 inputs, 2 required

  • certificateobjectrequired“The end-entity certificate to judge: exactly one of pem / derBase64 / path.”
  • chainarray“The issuing certificates, leaf's issuer first (the path is [certificate, ...chain]) (every PEM block of every item is taken).”
  • purposestringrequired“The purpose needed: serverAuth, clientAuth, codeSigning, emailProtection, timeStamping, ocspSigning, any, or a dotted KeyPurposeId OID.”
  • restrictIssuersboolean“Apply a CA's own extKeyUsage to what it issued (what every Web PKI validator does; no sentence of RFC 5280 requires it).”
  • requireExplicitPurposeboolean“Require the certificate to carry extKeyUsage and name the purpose explicitly (the stricter Web PKI reading); default false = no extKeyUsage means unrestricted …”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • verbositystring“'summary' keeps the scalar fields only (token-frugal).”
  • fieldsarray“Dot-paths to keep after verbosity (arrays map over elements); unmatched paths land in _meta.unmatchedFields.”
• inspect_csrreads or searches

  “Read-only RFC 2986 report of ONE PKCS#10 certification request: subject (RFC 4514 + RDNs), public key (kind, bits, curve / modulus), every attribute, the extensions requested through extensionRequest…”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world no

  10 inputs, 1 required

  • requestobjectrequired“The PKCS#10 request (CERTIFICATE REQUEST PEM or DER): exactly one of pem / derBase64 / path.”
  • rawExtensionsboolean“Keep every requested extension undecoded (kind raw, valueDer as hex) — the way past PKI_X509_EXTENSION_MALFORMED.”
  • verifyboolean“Verify the request's signature under the key it carries (proof of possession; one Web Crypto verification).”
  • allowSha1boolean“Accept or produce SHA-1 signatures (legacy material you already trust).”
  • encodingRulesstring“'der' (strict X.690 DER, default) or 'ber' (indefinite / non-minimal lengths and constructed strings, as legacy CMS producers write).”
  • pemModestring“'strict' (RFC 7468 exactly, default) or 'lax' (tolerates whitespace, line length and RFC 1421 headers).”
  • strictboolean“Escalate the first engine warning to a PKI_STRICT_DIAGNOSTIC error instead of listing it in diagnostics[].”
  • limitsobject“Raise pkinative's 22 named security bounds for this call (trusted input only; absent keys keep the engine defaults).”
  • verbositystring“'summary' keeps the scalar fields only (token-frugal).”
  • fieldsarray“Dot-paths to keep after verbosity (arrays map over elements); unmatched paths land in _meta.unmatchedFields.”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.