← Back to search

@pkistudio/pkistudiomcp

GitHub Actions Scanned 27d ago

Local MCP server exposing PkiStudioJS ASN.1 and PKI key material tools.

B
87.1 / 100

Versions

0.7.2latest
May 29, 2026
0.7.1
May 29, 2026
0.7.0
May 24, 2026
0.6.0
May 21, 2026
0.5.1
May 20, 2026
+ show 17 moreshow less
0.5.0
May 19, 2026
0.4.0
May 16, 2026
0.3.3
May 8, 2026
0.3.2
May 8, 2026
0.3.1
May 6, 2026
0.3.0
May 6, 2026
0.2.2
May 5, 2026
0.2.1
May 5, 2026
0.2.0
May 5, 2026
0.1.0
May 5, 2026
0.0.9
May 5, 2026
0.0.8
May 5, 2026
0.0.7
May 3, 2026
0.0.6
May 2, 2026
0.0.5
May 1, 2026
0.0.4
May 1, 2026
0.0.3
May 1, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 28

parse_asn1
annotations: none low

Parse ASN.1 DER, BER, PEM, HEX, or base64 text and return a JSON tree.

maxTopLevelNodes number
summarize_asn1
annotations: none low

Parse ASN.1 input and return a compact summary of tags, OIDs, and top-level nodes.

maxTopLevelNodes number
describe_node
annotations: none low

Describe a parsed ASN.1 node by node id.

nodeId string includeRawValue boolean hexPreviewLength number includeHexPreview boolean
extract_asn1_node
annotations: none low

Extract a parsed ASN.1 node and its subtree by node id as DER bytes.

nodeId string
normalize_asn1_input
annotations: none low

Decode DER, BER, PEM, HEX, or base64 input and return round-trip re-encoded ASN.1 bytes.

asn1_node_value
annotations: none low

Return the decoded display value and raw value bytes for one parsed ASN.1 node.

nodeId string
encode_oid
annotations: none low

Encode an object identifier string into ASN.1 OBJECT IDENTIFIER value bytes.

oid string
decode_oid_value
annotations: none low

Decode ASN.1 OBJECT IDENTIFIER value bytes into dotted object identifier text.

value string
resolve_oid
annotations: none low

Resolve an object identifier using the OID names bundled with PkiStudioJS.

oid string
parse_asn1_definition
annotations: none low

Parse a supported ASN.1 definition subset into ASN.1 Instance Builder Schema Model JSON and return defined type names.

definition string
validate_asn1_instance
annotations: none low

Validate JSON instance input against a selected type in a supported ASN.1 definition subset or Schema Model JSON.

input unknown
validate_asn1_schema
annotations: none low

Validate a supported ASN.1 definition subset or ASN.1 Instance Builder Schema Model JSON and return schema diagnostics.

create_asn1_instance
annotations: none low

Build DER bytes from JSON instance input and a selected type in a supported ASN.1 definition subset or Schema Model JSON.

input unknown includeDerSummary boolean
list_asn1_builder_features
annotations: none low

List the supported ASN.1 Instance Builder subset, JSON input shapes, and known limitations.

sift_asn1_definition_candidates
annotations: none low

Rank ASN.1 definition candidates for ASN.1 data using custom ASN.1 definitions or the built-in PKI component corpus.

minScore number definition string maxResults number definitions array excludeTypes array includeNodes boolean includeTypes array includeSubtrees boolean maxSubtreeDepth number maxSubtreeReports number includeEmptySubtrees boolean
sift_pki_asn1_definition_candidates
annotations: none low

Rank PKI ASN.1 definition candidates using the built-in ASN.1 Definition Sifter PKI corpus and optional profile filters.

minScore number profiles array maxResults number excludeTypes array includeNodes boolean includeTypes array includeSubtrees boolean maxSubtreeDepth number maxSubtreeReports number includeEmptySubtrees boolean
list_asn1_definition_sifter_features
annotations: none low

List ASN.1 Definition Sifter tool scope, PKI profiles, and candidate report options.

recognize_key_material
annotations: none low

Recognize a PKCS#8 private key or SPKI public key and return its key family, label, and capabilities.

data string kind enum
list_supported_key_algorithms
annotations: none low

List WebCrypto key pair algorithms supported by this runtime for key generation.

generate_key_pair
annotations: none low

Generate a key pair and return the private key as PKCS#8 DER and public key as SPKI DER.

label string
verify_key_pair
annotations: none low

Verify that a PKCS#8 private key matches an SPKI public key by signing and verifying sample data.

publicKey string privateKey string
certificate_matches_key
annotations: none low

Check whether an X.509 certificate public key matches supplied public key bytes or a PKCS#8 private key.

publicKey string privateKey string certificate string
parse_certificate
annotations: none low

Parse an X.509 certificate with CertGadgets and return its structure, details, and CDP/AIA/OCSP resource plans without network access.

data string maxDepth number includeDer boolean sourceName string
fetch_certificate_network_resources
annotations: none low

Fetch HTTP(S) CDP/AIA/OCSP-related resources discovered in an X.509 certificate. Parsing itself is local; this tool performs external network access.

data string urls array maxBytes number timeoutMs number sourceName string maxResources number resourceKinds array
create_csr
annotations: none low

Create a PKCS#10 certificate signing request from a PKCS#8 private key, SPKI public key, and subject DN.

publicKey string subjectDn string privateKey string
create_self_signed_certificate
annotations: none low

Create a self-signed X.509 certificate from a PKCS#8 private key, SPKI public key, and subject DN.

keyUsages array publicKey string subjectDn string privateKey string validityDays number
read_pkcs12
annotations: none low

Read PKCS#12/PFX data and return contained private keys, public keys, and certificates.

data string password string sourceName string
write_pkcs12
annotations: none low

Create PKCS#12/PFX data from one or more private keys and optional X.509 certificates.

keys array label string password string privateKey string certificate string

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 64

low
Tool 'parse_asn1' has no annotations annotation_checker · 100%
low
Tool 'summarize_asn1' has no annotations annotation_checker · 100%
low
Tool 'describe_node' has no annotations annotation_checker · 100%
low
Tool 'extract_asn1_node' has no annotations annotation_checker · 100%
low
Tool 'normalize_asn1_input' has no annotations annotation_checker · 100%
low
Tool 'asn1_node_value' has no annotations annotation_checker · 100%
low
Tool 'encode_oid' has no annotations annotation_checker · 100%
low
Tool 'decode_oid_value' has no annotations annotation_checker · 100%
low
Tool 'resolve_oid' has no annotations annotation_checker · 100%
low
Tool 'parse_asn1_definition' has no annotations annotation_checker · 100%
low
Tool 'validate_asn1_instance' has no annotations annotation_checker · 100%
low
Tool 'validate_asn1_schema' has no annotations annotation_checker · 100%
low
Tool 'create_asn1_instance' has no annotations annotation_checker · 100%
low
Tool 'list_asn1_builder_features' has no annotations annotation_checker · 100%
low
Tool 'sift_asn1_definition_candidates' has no annotations annotation_checker · 100%
low
Tool 'sift_pki_asn1_definition_candidates' has no annotations annotation_checker · 100%
low
Tool 'list_asn1_definition_sifter_features' has no annotations annotation_checker · 100%
low
Tool 'recognize_key_material' has no annotations annotation_checker · 100%
low
Tool 'list_supported_key_algorithms' has no annotations annotation_checker · 100%
low
Tool 'generate_key_pair' has no annotations annotation_checker · 100%
low
Tool 'verify_key_pair' has no annotations annotation_checker · 100%
low
Tool 'certificate_matches_key' has no annotations annotation_checker · 100%
low
Tool 'parse_certificate' has no annotations annotation_checker · 100%
low
Tool 'fetch_certificate_network_resources' has no annotations annotation_checker · 100%
low
Tool 'create_csr' has no annotations annotation_checker · 100%
low
Tool 'create_self_signed_certificate' has no annotations annotation_checker · 100%
low
Tool 'read_pkcs12' has no annotations annotation_checker · 100%
low
Tool 'write_pkcs12' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: parse_asn1 manifest_parser · 85%
info
Tool: summarize_asn1 manifest_parser · 85%
info
Tool: describe_node manifest_parser · 85%
info
Tool: extract_asn1_node manifest_parser · 85%
info
Tool: normalize_asn1_input manifest_parser · 85%
info
Tool: asn1_node_value manifest_parser · 85%
info
Tool: encode_oid manifest_parser · 85%
info
Tool: decode_oid_value manifest_parser · 85%
info
Tool: resolve_oid manifest_parser · 85%
info
Tool: parse_asn1_definition manifest_parser · 85%
info
Tool: validate_asn1_instance manifest_parser · 85%
info
Tool: validate_asn1_schema manifest_parser · 85%
info
Tool: create_asn1_instance manifest_parser · 85%
info
Tool: list_asn1_builder_features manifest_parser · 85%
info
Tool: sift_asn1_definition_candidates manifest_parser · 85%
info
Tool: sift_pki_asn1_definition_candidates manifest_parser · 85%
info
Tool: list_asn1_definition_sifter_features manifest_parser · 85%
info
Tool: recognize_key_material manifest_parser · 85%
info
Tool: list_supported_key_algorithms manifest_parser · 85%
info
Tool: generate_key_pair manifest_parser · 85%
info
Tool: verify_key_pair manifest_parser · 85%
info
Tool: certificate_matches_key manifest_parser · 85%
info
Tool: parse_certificate manifest_parser · 85%
info
Tool: fetch_certificate_network_resources manifest_parser · 85%
info
Tool: create_csr manifest_parser · 85%
info
Tool: create_self_signed_certificate manifest_parser · 85%
info
Tool: read_pkcs12 manifest_parser · 85%
info
Tool: write_pkcs12 manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (7) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 135 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%