venafi-integration-core

An MCP (Model Context Protocol) server that provides shared knowledge, templates, and tools for building Venafi integrations — both connectors (Go) and adaptable drivers (PowerShell).

Use this with Claude Code or any MCP-compatible AI assistant to get expert guidance on integration architecture, project scaffolding, deployment, and troubleshooting.

What's Inside

| Tool | Description | |---|---| | get_template | Go code templates: go.mod, main.go, app.go, web.go, Makefile, Dockerfile, golangci.yaml, .gitignore | | scaffold_project | Complete project structure showing every file needed for a new connector or adaptable driver | | get_guidance | Focused guidance on: architecture, manifest, testing, deployment, troubleshooting, certificate-formats, common-mistakes, container-registry, bootstrap | | get_core_patterns | DI wiring, handler pattern, payload encryption, error handling, logging |

| Resource | Description | |---|---| | Core Blueprint | Architecture, project structure, dependencies shared by all integrations | | Deployment Guide | Container registry, vSatellite, build/push, plugin registration, troubleshooting | | Known Gaps | 19 documented Venafi platform behaviors learned from production integrations | | Bootstrap Guide | Step-by-step new project setup from Phase 0 (registry) to Phase 5 (deploy) | | Manifest Template | Base manifest.json with shared structure |

Setup

Quick Install (Claude Code CLI)

Install the core plus the MCPs for your integration type:

claude mcp add venafi-integration-core -- npx -y venafi-integration-core     # Required for all types
claude mcp add venafi-connector-machine -- npx -y venafi-connector-machine   # Machine connector
claude mcp add venafi-connector-ca -- npx -y venafi-connector-ca             # CA connector
claude mcp add venafi-adaptable-app -- npx -y venafi-adaptable-app           # Adaptable driver

To install user-level (available across all projects), add -s user after mcp add.

Manual Setup

Add to your project's .claude/settings.json:

{
  "mcpServers": {
    "venafi-integration-core": {
      "command": "npx",
      "args": ["-y", "venafi-integration-core"]
    },
    "venafi-connector-machine": {
      "command": "npx",
      "args": ["-y", "venafi-connector-machine"]
    },
    "venafi-connector-ca": {
      "command": "npx",
      "args": ["-y", "venafi-connector-ca"]
    },
    "venafi-adaptable-app": {
      "command": "npx",
      "args": ["-y", "venafi-adaptable-app"]
    }
  }
}

Venafi Integration Types

Connectors (Go)

A Venafi connector is a containerized Go REST service that runs on a Venafi vSatellite. It acts as middleware between Venafi TLS Protect Cloud and an external system:

• Machine connectors discover and provision TLS certificates on target systems (servers, load balancers, network appliances)
• CA connectors integrate with Certificate Authorities for certificate issuance, import, and revocation

Adaptable Drivers (PowerShell)

A Venafi adaptable driver is a PowerShell .ps1 script that runs directly on the TPP server. It implements 4 functions to manage certificates on a target platform:

• Test-Settings — validate connectivity and credentials
• Discover-Certificates — enumerate all certificates on the target, return PEM + metadata
• Install-Certificate — push a certificate (PEM or PKCS#12) to the target
• Extract-Certificate — retrieve a specific certificate by its platform ID

Built From Experience

This knowledge base was built from hands-on experience developing production integrations:

Connectors:

• Splunk (SSH machine connector)
• FortiGate (REST API machine connector)
• IBM API Connect (REST API machine connector)
• IBM DataPower (REST API machine connector)
• DigiCert ONE (CA connector)

Adaptable drivers:

• Aruba ClearPass 6.11.x (REST API adaptable app driver)

Related Packages

• venafi-connector-machine — Machine connector endpoints, SSH/REST client patterns, discovery/provisioning
• venafi-connector-ca — CA connector endpoints, certificate issuance/import/revocation patterns
• venafi-adaptable-app — Adaptable app driver templates, field definitions, PowerShell patterns

License

Apache-2.0