Presentamos el servidor MCP para Command :Una forma más inteligente de gestionar la confianza digital

Hi, I’m JD Kilgallin— I lead the Analytics & AI team here at Keyfactor. Over the past several months, I’ve had the privilege to work with some truly talented people and incredible technology that empowers our customers to establish and manage digital trust in ways we’ve never imagined.

In particular, the promise of Agentic AI – which has become a hot topic among CIOs, CISOs, and technical practitioners alike – is that teams can achieve new levels of automation using a wide variety of enterprise software through a single natural-language interface. One of the most exciting developments is the Model Context Protocol (MCP), an innovative standard rapidly gaining traction that allows an AI to access existing enterprise applications.  In a way, it takes the AI ecosystem from smart to truly usable and actionable. Generative AI can talk; Agentic AI can do, using the Model Context Protocol. And now, one more thing it can do is to autonomously manage digital trust.

En Keyfactor Hemos creado nuestro propio servidor MCP y estamos emocionados de compartirlo con ustedes hoy.

La IA se une a la PKI: Presentamos la Command Servidor MCP

The Command MCP Server, now available in preview, seamlessly integrates AI models with the Keyfactor Command certificate lifecycle management platform. With this integration, AI-powered assistants like Claude can query, analyze, and even act on certificate data within Command. The result? Now teams can identify and remediate certificate-related issues within seconds, using simple conversational prompts and receiving in-depth interpretation of results.

¿Por qué esto importa?

A medida que el uso de certificados digitales se expande rápidamente, no es inusual ver miles, si no millones, en la huella digital de una organización. Sin embargo, con el aumento de los volúmenes y la reducción de su vida útil, los equipos necesitan herramientas de automatización cada vez más avanzadas para gestionarlos y orquestarlos a gran escala.

Keyfactor Command is designed to help organizations tackle this problem head on — delivering visibility, governance, and automation across their PKI and certificate landscape. But now imagine that users can perform these complex certificate management tasks, even without accessing the GUI. With this integration, they can.  No longer is complex query construction required to answer questions like

“¿Cuáles son los certificados más riesgosos en mi entorno?”

“¿Qué certificados de producción vencen en los próximos 30 días?”

“¿Cuántos certificados emití en mayo en comparación con el año pasado?”

¿El usuario 'fjones' emitió algún certificado de autenticación de cliente en 2025? ¿Cuál fue el más reciente?

El asistente de IA de un usuario puede responder a esta pregunta de forma conversacional, desde la misma interfaz que los demás flujos de trabajo de IA de Agentic. Si el certificado no es adecuado, la renovación puede ser tan simple como escribir "Revocar y reemplazar", lo que permite a Claude generar comentarios de revocación y transcribir automáticamente la información del sujeto para la nueva solicitud, completando así los eventos del ciclo de vida del certificado. Keyfactor Command .

Impulsado por inteligencia de riesgos

Moreover, by leveraging data and insights from the new Command Risk Intelligence module, the Command MCP Server is a powerful tool to help organizations make sense of their top PKI risks. Users do not need to refer to highly technical documentation to understand the implications of messages like “CA certificate without basic constraints” or “certificate without AKID”. Claude can provide its own explanation of the issue, expanding on the Risk Intelligence insights in Command to make risks more actionable than ever. It can answer followup questions about the issues, helping to contextualize the risk and explain the practical impact to an enterprise security network at any length. And it can supplement the Risk Intelligence analysis with its own conclusions, making recommendations about the appropriate course of action. If revocation and/or renewal is required, Claude can perform this automatically, with the operations still fully covered by the security model and audit capabilities of Keyfactor Command. Claude can furthermore be configured to require explicit human approval before executing these operations, which is recommended to provide additional security. These product features help users to retain control of their certificate operations even in the AI Era.

In this demo, I briefly show how, using Claude for Desktop , I can complete this full lifecycle – identify risky certificates, understand why they pose a risk, then revoke and replace them via Command – all through plain English. No scripts. No manual steps. Just a conversation.

Simplificando la PKI, no solo para los expertos

Esta no es solo una nueva característica, es una forma completamente nueva de interactuar con Command : una herramienta intuitiva, inteligente e increíblemente potente. Estas son solo algunas maneras en que los equipos pueden beneficiarse del uso de Command Servidor MCP:

• Ask anything and get AI powered insights: Think of it as your own digital trust assistant, providing instant insights into your PKI and certificate landscape. The Command MCP Server can help you easily detect and assess risks at scale.
• Remediate critical vulnerabilities instantly: The Command MCP doesn’t just find risks, it helps you act on them. Plain language prompts like “Revoke and replace all certificates issued by EJBCA-dev-4 last week with risk score over 1000” take these actions from hours to seconds.
• Simplify PKI for everyone— not just experts: Make certificate management easy, regardless of technical proficiency, PKI knowledge, or even spoken language. Claude’s ability to explain the state of your PKI at any level and in many languages makes digital trust accessible.  

Although still in early development, we’ve already begun to demonstrate its application across the rest of the Keyfactor product portfolio, including identifying risks in code-signing certificates within Keyfactor Signum, our SaaS-based secure code signing platform. The potential for fully autonomous configuration of identity certificates – on web servers, load balancers, network equipment, cloud workloads, and other systems – is enormous, and Keyfactor Command’s integration with Agentic AI via the Model Context Protocol is the best path to achieve this. We similarly envision a future where securely signing code with certificates in Signum and SignServer, generating keys and CSRs using Bouncy Castle, gaining deeper Intelligence from CipherInsights and AgileSec Analytics, and more are all possible through AI Agents.

El Command MCP Server representa un gran avance en nuestra visión de inteligencia artificial de Agentic, al brindar a nuestros clientes mayor inteligencia, operaciones optimizadas y una automatización mejorada. Las posibilidades son realmente infinitas, y esto es solo el comienzo.

¿Listo para probarlo?

Start today! The Command MCP server is currently available in GitHub, and details are accessible through our documentation. Oh, and that Claude instance in the video above? It’s the author of the documentation – who better qualified to document the Command MCP Server than the MCP Client who interacts with it directly? The documentation has been thoroughly reviewed by myself and other Keyfactor staff.

Esta funcionalidad se encuentra actualmente en versión preliminar y no debe utilizarse en entornos de producción. A medida que esta tecnología evolucione y madure, seguiremos actualizando y ampliando nuestra cobertura de casos de uso y documentación complementaria.

¡Por un futuro brillante y automatizado!