ciphertrust-manager-mcp-server

Overview

This is an independently-developed MCP server that bridges AI assistants like Claude and Cursor with Thales CipherTrust Manager, a cryptographic key management platform. The server exposes tools for key management, CTE client management, user management, and connection management through JSON-RPC communication over stdin/stdout. It supports both manual JSON-RPC testing and interactive UI testing using the Model Context Protocol Inspector. The server is designed to be run as a subprocess by MCP clients and uses the ksctl CLI to interact with CipherTrust resources. It's important to note that this is an unofficial, open-source project not officially supported by Thales.

Try asking AI

After installing, here are 6 things you can ask your AI assistant:

• key_management

  Manage cryptographic keys in CipherTrust Manager

  Try:List all available keysTry:Create a new AES keyTry:Delete key 'production-db-key'
• user_management

  Manage user accounts and access in CipherTrust Manager

  Try:Create a new user 'admin-user'Try:List all usersTry:Disable user 'temp-user'
• cte_client_management

  Manage CipherTrust Transparent Encryption clients

  Try:List all CTE clientsTry:Add a new CTE clientTry:Remove CTE client 'client-123'
• connection_management

  Manage connections to external systems

  Try:List all connectionsTry:Create a new database connectionTry:Test connection 'oracle-db'
• cluster_management

  Manage CipherTrust Manager cluster configuration

  Try:Show cluster statusTry:Add node to clusterTry:Remove node from cluster
• license_management

  Manage CipherTrust Manager licenses

  Try:Show current license detailsTry:Upload new licenseTry:Check license expiration
• crypto_operations

  Perform cryptographic operations using CipherTrust Manager

  Try:Encrypt data with key 'payment-card-key'Try:Decrypt ciphertextTry:Generate HMAC
• system_information

  Get system and service information from CipherTrust Manager

  Try:Show system statusTry:Get service informationTry:Check system health

Note: Tool names were inferred from the Features section and test examples. The README doesn't have a dedicated tools section, but mentions supported operations in the Features section and provides some tool examples in the Testing section.

Comparable tools

Installation

git clone https://github.com/sanyambassi/ciphertrust-manager-mcp-server.git
cd ciphertrust-manager-mcp-server

uv venv
.venv\Scripts\activate  (Windows) or .venv/bin/activate (Unix)
uv pip install -e .

CIPHERTRUST_URL=https://your-ciphertrust-manager.example.com
CIPHERTRUST_USER=admin
CIPHERTRUST_PASSWORD=your-password-here
CIPHERTRUST_NOSSLVERIFY=true

{
  "mcpServers": {
    "ciphertrust": {
      "command": "/absolute/path/to/ciphertrust-manager-mcp-server/.venv/bin/ciphertrust-mcp-server",
      "env": {
        "CIPHERTRUST_URL": "https://your-ciphertrust.example.com",
        "CIPHERTRUST_USER": "admin",
        "CIPHERTRUST_PASSWORD": "your-password-here"
      }
    }
  }
}

FAQ

Is this project officially supported by Thales?

No, this is an independently-developed open-source project. It uses public APIs and documented interfaces but is not officially supported by Thales.

What AI assistants are compatible with this MCP server?

The server is designed to work with AI assistants that support the MCP protocol, including Claude Desktop and Cursor.

Can I use this server in production environments?

The project states it should be thoroughly tested in your environment as it is provided 'as-is' with no warranty. It's recommended to evaluate its suitability for your specific production needs.

Compare ciphertrust-manager-mcp-server with