venafi-connector-core

An MCP (Model Context Protocol) server that provides shared knowledge, templates, and tools for building Venafi TLS Protect Cloud connectors — both machine connectors and CA connectors.

Use this with Claude Code or any MCP-compatible AI assistant to get expert guidance on connector architecture, manifest schemas, deployment, and troubleshooting.

What's Inside

| Tool | Description | |---|---| | get_template | Go code templates: go.mod, main.go, app.go, web.go, Makefile, Dockerfile, golangci.yaml, .gitignore | | scaffold_project | Complete project structure showing every file needed for a new connector | | get_guidance | Focused guidance on: architecture, manifest, testing, deployment, troubleshooting, certificate-formats, common-mistakes, container-registry, bootstrap | | get_core_patterns | DI wiring, handler pattern, payload encryption, error handling, logging |

| Resource | Description | |---|---| | Core Blueprint | Architecture, project structure, dependencies shared by all connectors | | Deployment Guide | Container registry, vSatellite, build/push, plugin registration, troubleshooting | | Known Gaps | 19 documented Venafi platform behaviors learned from production connectors | | Bootstrap Guide | Step-by-step new project setup from Phase 0 (registry) to Phase 5 (deploy) | | Manifest Template | Base manifest.json with shared structure |

Setup

Quick Install (Claude Code CLI)

# Add to your project
claude mcp add venafi-connector-core -- npx -y venafi-connector-core

# Or add for all projects (user-level)
claude mcp add -s user venafi-connector-core -- npx -y venafi-connector-core

For full coverage, add all three:

claude mcp add venafi-connector-core -- npx -y venafi-connector-core
claude mcp add venafi-connector-machine -- npx -y venafi-connector-machine
claude mcp add venafi-connector-ca -- npx -y venafi-connector-ca

Manual Setup

Alternatively, add to your project's .claude/settings.json:

{
  "mcpServers": {
    "venafi-connector-core": {
      "command": "npx",
      "args": ["-y", "venafi-connector-core"]
    },
    "venafi-connector-machine": {
      "command": "npx",
      "args": ["-y", "venafi-connector-machine"]
    },
    "venafi-connector-ca": {
      "command": "npx",
      "args": ["-y", "venafi-connector-ca"]
    }
  }
}

What Is a Venafi Connector?

A Venafi connector is a containerized Go REST service that runs on a Venafi vSatellite. It acts as middleware between Venafi TLS Protect Cloud and an external system:

• Machine connectors discover and provision TLS certificates on target systems (servers, load balancers, network appliances)
• CA connectors integrate with Certificate Authorities for certificate issuance, import, and revocation

Built From Experience

This knowledge base was built from hands-on experience developing 5 production connectors:

• Splunk (SSH machine connector)
• FortiGate (REST API machine connector)
• IBM API Connect (REST API machine connector)
• IBM DataPower (REST API machine connector)
• DigiCert ONE (CA connector)

Related Packages

• venafi-connector-machine — Machine connector-specific endpoints, SSH/REST client patterns, discovery/provisioning
• venafi-connector-ca — CA connector-specific endpoints, certificate issuance/import/revocation patterns

License

Apache-2.0