create_pki_role

MCP tool from Vault MCP Server by hashicorp

Creates a new PKI role for issuing certificates.

How to use it

create_pki_role is exposed by the Vault MCP Server MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the create_pki_role tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

Install Vault MCP Server

$docker run --cap-add=IPC_LOCK --name=vault-dev --network=mcp -p 8200:8200 hashicorp/vault server -dev

FULL VAULT MCP SERVER LISTING

Other tools in Vault MCP Server (29)

(Optional) Alternative names for the certificate

The PEM-encoded certificate

Common name for the certificate

Creates a new mount in Vault.

create_pki_issuer

Creates a new PKI issuer.

Delete a mount in Vault.

delete_pki_role

Deletes a PKI role.

Delete secrets (or keys) in a KV mount under a specific path in Vault.

(Optional) Description for the mount

Enables and configures a PKI secrets engine.

(Optional) IP SANs for the certificate

issue_pki_certificate

Issues a new certificate using a PKI role.

(Optional) The key name to delete from the entire secret (defaults to deleting the entire secret)

Lists all mounts in Vault.

list_pki_issuers

Lists all PKI issuers in a mount.

Lists all PKI roles in a mount.

Lists secrets in a KV mount under a specific path in Vault.

The mount path of the secret engine

Name of the issuer

The path where the mount will be created

The PEM-encoded private key

read_pki_issuer

Reads details about a specific PKI issuer.

Reads a PKI role configuration.

Reads a secret from a KV mount in Vault.

Name of the role to use

(Optional) Time-to-live for the certificate

The type of mount (e.g., 'kv', 'kv2', 'pki')

The value to store

Writes a secret to a KV mount in Vault.