pki-cli

Automate X.509 certificate lifecycle operations via the PKI Manager API.

Updated Apr 1, 2026
One-click install
npx skills add https://github.com/moonshineTP/ATTT-20252 --skill pki-cli
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pki-cli
Source: https://github.com/moonshineTP/ATTT-20252/tree/main/.gemini/skills/pki-cli
Command: npx skills add https://github.com/moonshineTP/ATTT-20252 --skill pki-cli

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires claude-code, uv, uvx, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill simplifies the management of X.509 certificates through the PKI Manager CLI, automating common PKI operations.

Core Features & Use Cases

  • Certificate Management: Create, issue, renew, and revoke certificates.
  • CA Operations: Manage Certificate Authorities, including listing, creating, revoking, and deleting.
  • Security: Ensures secure certificate handling and storage with optional configuration via .env file.
  • Use Case: Ideal for system administrators or DevOps professionals managing SSL/TLS certificates for services.

Quick Start

To issue a new server certificate, use the following command: /pki-cli cert issue --ca <CA_ID> --cn "example.com" --type server

Frequently Asked Questions about pki-cli

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate X.509 certificate lifecycle management from the command line?

You can automate X.509 certificate lifecycle management by executing CLI commands to create, issue, renew, and revoke certificates via the PKI Manager API. This tool streamlines these operations directly from your terminal.

How do I issue a new server certificate using a CLI?

To issue a server certificate via CLI, run the command specifying your target Certificate Authority ID, common name, and certificate type. The tool handles the API request to generate the certificate.

Do I need UV and Claude Code CLI to manage PKI operations?

Yes, you need both the Claude Code CLI and UV/UVX installed to execute command-line PKI operations. These dependencies provide the runtime environment required to interact with the PKI Manager.

Can I manage Certificate Authorities using this command-line interface?

Yes, you can manage Certificate Authorities comprehensively using the CLI. It supports listing, creating, revoking, and deleting CAs to help you maintain your internal public key infrastructure.

Does this PKI manager support OIDC authentication for secure certificate handling?

Yes, the PKI manager integrates with OIDC authentication to ensure secure certificate handling. You can also optionally configure environment variables via a .env file for secure credential storage.

What is the best way to handle SSL/TLS certificate revocation for DevOps services?

The best way to handle SSL/TLS certificate revocation is using an automated CLI to interact with your PKI Manager API. It allows DevOps professionals to instantly revoke compromised server certificates.