DetentPoint.SqlCertForge.Mcp
1.3.0
dotnet tool install --global DetentPoint.SqlCertForge.Mcp --version 1.3.0
dotnet new tool-manifest
dotnet tool install --local DetentPoint.SqlCertForge.Mcp --version 1.3.0
#tool dotnet:?package=DetentPoint.SqlCertForge.Mcp&version=1.3.0
nuke :add-package DetentPoint.SqlCertForge.Mcp --version 1.3.0
SqlCertForge
Provisions the TLS certificate for SQL Server connection encryption end to end, on standalone instances and on Failover Cluster Instances, and binds certificates to SSRS and Power BI Report Server HTTPS endpoints.
Runs as a stdio MCP server, so an AI agent can do the work, or as PowerShell commands you call yourself.
Install
dotnet tool install --global DetentPoint.SqlCertForge.Mcp
Then point your MCP client at sqlcertforge-mcp.
Licence
Read-only checks are free. The commands that change a binding need a signed licence:
- Save the
.licfile you were emailed somewhere permanent. - Set
SQLCERTFORGE_LICENSE_FILEto point at it.
The licence is verified offline against a public key compiled into this package. It never contacts a licence server, so it works in disconnected and air-gapped estates.
Requirements
Windows, with either Windows PowerShell 5.1 or PowerShell 7 — either alone is enough. Administrative rights on the target instance, and WinRM line of sight for the cluster and remote cases.
What it does not do
It is not a certificate authority. It requests certificates from yours, or imports one you already hold. It does not manage Always On availability group listeners, and it does not configure SQL Server beyond connection encryption.
Built by Detent Point, LLC.
| Product | Versions Compatible and additional computed target framework versions. |
|---|---|
| .NET | net10.0 is compatible. net10.0-android was computed. net10.0-browser was computed. net10.0-ios was computed. net10.0-maccatalyst was computed. net10.0-macos was computed. net10.0-tvos was computed. net10.0-windows was computed. |
This package has no dependencies.