Entrust PKI as a Service

Integrating the MCP server

The PKIaaS MCP (Model Context Protocol) server connects to backend services and exposes PKI functionality through a conversational interface for managing certificate authorities, certificates, certificate profiles, and instances. For example:

  • Which PKIaaS instances can I access?
  • Which certificates issued by the Acme CA expire in the next 90 days?
  • Sign this CSR with the issuing CA and the privatessl-tls-server profile, and set the subject DN to CN=web.example.com
  • Create a subordinate CA with the issuing-01 name, signed by our root, with an RSA 4096 key.
  • Revoke the 00bf66db90465ae28516357abc97bd9118 certificate with Key Compromise as the revocation reason.

See below for how to integrate this server with different clients.

Integrating VS Code GitHub Copilot with PKIaaS MCP

Use the PKIaaS MCP extension to make PKIHub tools available in GitHub Copilot Chat for Visual Studio Code.

To configure PKIHub tools in GitHub Copilot for Visual Studio Code:

  1. Open the Command Palette:

    • On Windows and Linux, press Ctrl+Shift+P.
    • On macOS, press Cmd+Shift+P.
  2. Enter MCP: Browse MCP Servers, then select the command from the results.

    MCP
  3. Search for @mcp pkiaas in the extensions list.

  4. Install the PKIaaS MCP extension.

  5. Complete the browser sign-in when prompted.

  6. Open GitHub Copilot Chat.

  7. Select Configure Tools.

  8. Enable the PKIHub MCP Server tools.

Integrating Claude Desktop with PKIaaS MCP

The following steps explain how to integrate Anthropic Claude Desktop with PKIaaS MCP.

To configure the PKIaaS MCP endpoint in Anthropic Claude Desktop:

  1. Go to Settings > Developer > Edit Config

  2. Open claude_desktop_config.json.

  3. Add the PKIaaS server under mcpServers.

    {
      "mcpServers": {
        "pkiaas": {
          "type": "http",
          "url": "<url>"
        }
      }
    }
    

    Where <url> is:

    • https://mcp.pkiaas.entrust.com/mcp for the United States region.
    • https://mcp.eu.pkiaas.entrust.com/mcp for the Europe region.

    If your version of Claude Desktop only supports local (stdio) MCP servers, use the mcp-remote bridge to connect to the remote HTTPS endpoint. For example:

    {
      "mcpServers": {
        "pkiaas": {
          "command": "npx",
          "args": ["-y", "mcp-remote", "https://mcp.pkiaas.entrust.com/mcp"]
        }
      }
    }
    
  4. Restart Claude Desktop.

  5. Complete the browser sign-in when prompted.

Integrating Claude Code with PKIaaS MCP

The following steps explain how to integrate Anthropic Claude Code with PKIaaS MCP.

To configure the PKIaaS MCP endpoint in Anthropic Claude Code:

  1. Run the following command to register the server.

    claude mcp add --transport http pkiaas <url>
    

    Where <url> is:

    • https://mcp.pkiaas.entrust.com/mcp for the United States region.
    • https://mcp.eu.pkiaas.entrust.com/mcp for the Europe region.

    For example:

    claude mcp add --transport http pkiaas https://mcp.pkiaas.entrust.com/mcp
    
  2. Run claude to start the assistant.

  3. Complete the browser sign-in when prompted.

Integrating other clients with PKIaaS MCP

Any client that supports the Model Context Protocol over HTTPS with OAuth can connect to the PKIaaS MCP server.

To integrate other clients with PKIaaS MCP:

  1. Point the client at the /mcp endpoint.

    • https://mcp.pkiaas.entrust.com/mcp for the United States region.
    • https://mcp.eu.pkiaas.entrust.com/mcp for the Europe region.
  2. Complete the browser sign-in when prompted.