Available Private CA MCP tools

The DigiCert® Private CA MCP server provides read-only tools for retrieving information about your Private CA environment. Your AI client selects the appropriate tool based on your question.

The information each tool can retrieve depends on the accounts, roles, and permissions assigned to your DigiCert ONE Service User.

The following example prompts illustrate the kinds of questions each tool can answer. Users do not need to specify the tool name in their prompts; the AI client selects the appropriate tool.

Certificate tools

Tool	What it retrieves	Example prompt
`get_certificate`	A certificate identified by its certificate ID.	Get the certificate with ID <certificate-ID>.
`list_certificates`	Certificates matching a serial number, subject key ID, or subject public key.	Find the certificate with serial number <serial-number>.
`list_discovered_certificates`	Discovered certificates, optionally filtered by certificate type or discovery information.	List the discovered certificates that expire this year.
`download_certificates_csv`	Certificate inventory data in CSV format.	Export the certificate inventory as CSV.

Certificate authority tools

Tool	What it retrieves	Example prompt
`list_certificate_authorities`	The private CAs (roots and ICAs)available to the Service User.	List the private CAs in my account.
`get_certificate_authority`	Details for a CA identified by its CA ID.	Show details for CA <CA-ID>.
`get_certificate_authority_status`	The active status of a CA.	Is CA <CA-ID> active?
`get_certificate_authority_hierarchy`	The CA hierarchy and certificate-chain relationships.	Show the hierarchy for CA <CA_ID>.
`get_certificate_authority_csr`	The certificate signing request for a CA.	Show the CSR for CA <CA_ID>.
`list_certificate_authority_notes`	Notes associated with a CA.	Show the notes for CA <CA_ID>.

CA configuration tools

Tool	What it retrieves	Example prompt
`get_certificate_authority_cert_policies_issuance`	The certificate-policy issuance configuration for a CA.	Which certificate policies can CA <CA-ID> issue?
`get_certificate_authority_aia_issuer_issuance`	The AIA issuer configuration for a CA.	Does CA <CA-ID> include AIA issuer information?
`get_certificate_authority_chain_configuration`	The certificate-chain configuration for a CA.	Show the configured certificate chains for CA <CA-ID>.
`get_certificate_authority_crl_issuance_configuration`	The CRL issuance configuration for a CA.	How frequently does CA <CA-ID> publish CRLs?
`get_certificate_authority_ocsp_configuration`	The OCSP configuration for a CA.	Show the OCSP configuration for CA <CA-ID>.
`get_certificate_expiration`	Certificate-expiration information available through Private CA.	Which certificates expire soon?

Certificate template tools

Tool	What it retrieves	Example prompt
`list_certificate_templates`	Certificate templates, optionally filtered by name.	List the certificate templates in my account.
`get_certificate_template`	Details for a certificate template identified by its template ID.	Show details for template <template-ID>.
`get_certificate_template_accounts`	The accounts assigned to a certificate template.	Which accounts can use template <template-ID>?
`get_certificate_template_schema`	The certificate-template validation schema.	Show the certificate-template validation schema.

OCSP responder tools

Tool	What it retrieves	Example prompt
`list_ocsp_responders`	The OCSP responders available to the Service User.	List the OCSP responders.
`get_ocsp_responder`	Details for an OCSP responder identified by its responder ID.	Show details for OCSP responder <responder-ID>.

AIA and CRL tools

Tool	What it retrieves	Example prompt
`list_aia_issuer_files`	AIA issuer files.	List the AIA issuer files.
`list_crl_infos`	CRL records.	List the CRLs.
`get_crl_info`	Details for a CRL identified by its CRL ID.	Show details for CRL <CRL-ID>.

Audit tools

Tool	What it retrieves	Example prompt
`list_audit_logs`	Private CA audit-log entries.	Show recent certificate revocation events.

本节内容如下: