Command MCP

🚀 Command-MCP

This is an MCP server for Command, built on the Python SDK of the Keyfactor Analytics & AI team. This preview software is experimental, and users are advised not to allow AI tools access to production data.

🚀 Quick Start

This MCP server is an experimental preview. It's not recommended for production use. Before using it, ensure you have met the necessary prerequisites and understand the operations and their required permissions.

✨ Features

• Retrieve information about the functionality license in Keyfactor Command.
• Get certificate details, enroll certificates, revoke certificates, and more.
• Provide a static definition of the Command MCP Server.

📦 Installation

1. Download this repository. The following steps assume you've downloaded it to "C:\mcp."
2. Create or identify an account in Command with the required permissions for the operations you plan to use.
3. Place environment variables in C:\mcp\mcpenv.txt. Use one line for each variable, based on your Command environment and the created account:
   • Basic auth:

     KEYFACTOR_HOSTNAME='...'
     KEYFACTOR_TOKEN='...'
     KEYFACTOR_TEMPLATE='WebServer'
     KEYFACTOR_CA='kftrain.keyfactor.lab\\keyfactor-KFTRAIN-CA'
     

   • OAuth:

     KEYFACTOR_HOSTNAME=...
     KEYFACTOR_URLBASE=Keyfactor/API
     COMMAND_IDP_TOKENURL=...
     COMMAND_IDP_CLIENTID=...
     COMMAND_IDP_CLIENTSECRET=...
     COMMAND_IDP_AUDIENCE=...
     KEYFACTOR_TEMPLATE=Server_tlsServerAuth-1y
     KEYFACTOR_CA=http://ejbca-ca.jdk-2025-may.svc.cluster.local:8082/ejbca\\Sub-CA
     

4. Run the following command (use "pip3" if your pip points to Python 2.x):

   pip install requests oauthlib httpx attrs python-dateutil uv
   

5. Test the command from the CLI to ensure it prints "Initializing MCP server":

   uv --directory C:\\mcp run --env-file=C:\\mcp\\mcpenv.txt commandmcp.py
   

6. In Claude, press Ctrl+Comma to open settings, go to the developer section, and click "edit config". Add the following to claude_desktop_config.json in the specified folder:

   {
       "mcpServers": {
           "keyfactorCommand": {
               "command": "uv",
               "args": [
                   "--directory",
                   "C:\\mcp",
                   "run",
                   "--env-file=C:\\mcp\\mcpenv.txt",
                   "commandmcp.py"
               ]
           }
       }
   }
   

7. In Claude, go to Settings -> Integration and make your desired selections for enabled operations and when Claude should ask for permission. It's recommended that Claude asks for permission before each use of the enrollment and revocation functions at a minimum.

📚 Documentation

Prerequisites

• Keyfactor Command version 11 or higher.
• Claude for Desktop.
• Python 3.

Operations and Required Permissions

🔧 Technical Details

• This MCP server is deployed as a local MCP server to clients like Claude for Desktop for security reasons.
• The template and CA parameters for enrollment must be specified as environment variables to the MCP server to limit MCP clients to the intended enrollment types. Permissions and availability must be set on these templates and CAs.
• For more details on implemented operations, refer to the comments in "commandmcp.py" or query your MCP client.
• For information on Keyfactor Command and required permissions, see the Keyfactor Command Reference Guide.

📄 License

This README does not provide license information.