issue_pki_certificate

MCP tool from Vault MCP Server by hashicorp

Issues a new certificate using a PKI role.

How to use it

issue_pki_certificate is exposed by the Vault MCP Server MCP server. Add the server to your MCP client (Claude Desktop, Cursor, Windsurf and others), and the issue_pki_certificate tool becomes available to the model automatically. See the full listing for setup details and every tool this server provides.

Install Vault MCP Server

$docker run --cap-add=IPC_LOCK --name=vault-dev --network=mcp -p 8200:8200 hashicorp/vault server -dev

FULL VAULT MCP SERVER LISTING

Other tools in Vault MCP Server (29)

(Optional) Alternative names for the certificate

The PEM-encoded certificate

Common name for the certificate

Creates a new mount in Vault.

create_pki_issuer

Creates a new PKI issuer.

create_pki_role

Creates a new PKI role for issuing certificates.

Delete a mount in Vault.

delete_pki_role

Deletes a PKI role.

Delete secrets (or keys) in a KV mount under a specific path in Vault.

(Optional) Description for the mount

Enables and configures a PKI secrets engine.

(Optional) IP SANs for the certificate

(Optional) The key name to delete from the entire secret (defaults to deleting the entire secret)

Lists all mounts in Vault.

list_pki_issuers

Lists all PKI issuers in a mount.

Lists all PKI roles in a mount.

Lists secrets in a KV mount under a specific path in Vault.

The mount path of the secret engine

Name of the issuer

The path where the mount will be created

The PEM-encoded private key

read_pki_issuer

Reads details about a specific PKI issuer.

Reads a PKI role configuration.

Reads a secret from a KV mount in Vault.

Name of the role to use

(Optional) Time-to-live for the certificate

The type of mount (e.g., 'kv', 'kv2', 'pki')

The value to store

Writes a secret to a KV mount in Vault.