Dcert from Scgis Wales is an MCP server designed for managing X.509 certificates and integrating with HashiCorp Vault's PKI Secrets Engine. Built with Rust, this free tool connects to AI-powered Integrated Development Environments via the Model Context Protocol, enhancing certificate analysis, format conversion, and key verification workflows. It supports both stdio and HTTP transport protocols, making it suitable for direct IDE integration or remote deployments. Dcert provides essential capabilities for developers working with TLS connections and certificate lifecycles, offering specialized functions within a modern development environment.

What does Dcert connect to?

Dcert connects to AI-powered Integrated Development Environments (IDEs) through the Model Context Protocol (MCP). It integrates directly with HashiCorp Vault's PKI Secrets Engine for certificate operations. As an MCP server, Dcert supports X.509 certificate analysis, format conversion, and key verification. It supports stdio as a default transport for IDE integration and HTTP for remote deployment. This connectivity allows Dcert to extend its capabilities to clients like Claude for Desktop, Cursor, and VS Code, which are compatible with MCP.

Core features and tools

Dcert offers several callable tools for certificate management. CLI commands include dcert [check] for analysis, dcert csr create and dcert csr validate for certificate signing requests, dcert convert for format changes, and dcert verify-key for key matching. HashiCorp Vault operations are handled by dcert vault. The Dcert-mcp server exposes tools such as analyze_certificate, check_expiry, check_revocation, compare_certificates, get_tls_connection_details, and export_tls_certificate_chain, providing a range of specialized functions.

Who is it for?

Dcert targets developers and users actively involved in managing X.509 certificates and TLS connections. Its integration with AI-powered IDEs and HashiCorp Vault makes it particularly useful for those operating within such ecosystems. The tool supports concrete workflows like decoding TLS certificates, checking expiry, and performing PKI operations through Vault. This is not the right fit if you do not manage X.509 certificates or TLS connections, or if your development workflow does not involve AI-powered IDEs or HashiCorp Vault.

How to get started

The server authenticates using optional OIDC/OAuth2 for its HTTP transport. For mutual TLS scenarios, client certificate authentication is required, involving client certificate and key files or a PKCS12 file.

Use cases

• Decoding and analyzing TLS certificates, including subject, issuer, SANs, validity, and TLS connection details.
• Converting certificate formats between PFX and PEM, and verifying private keys match certificates.
• Performing certificate issuance, signing, revocation, listing, storage, validation, and renewal via HashiCorp Vault's PKI Secrets Engine.

Dcert by Scgis Wales provides a focused set of tools for X.509 certificate management and HashiCorp Vault integration, built on Rust. It extends critical PKI capabilities directly into AI-powered IDEs through the Model Context Protocol, offering essential functions for developers. The tool's support for various transport protocols and authentication methods makes it adaptable to different deployment needs.