NHI Skill

NHI Skill

Manage NHI certificates and PKI infrastructure using the NHI MCP server.

Trigger

Use /nhi <action> [args] or describe what you want in natural language.

Actions

Certificate Lifecycle

Action	Description	Key MCP Tool
list	List all certificates	list_certificates
show <id>	Full details for a certificate	get_certificate_details
request	Issue a new certificate (prompts for required fields)	request_certificate
renew <id>	Renew an existing certificate	renew_certificate
reissue <id>	Reissue with a new key	reissue_certificate
revoke <id>	Revoke a certificate	revoke_certificate
retire <id>	Retire a certificate	retire_certificate
rollback <id> <version>	Roll back to a previous version	rollback_certificate
export <id> <format>	Export (der/pkcs7) — saved to file, not echoed	export_certificate

Infrastructure

Action	Description	Key MCP Tool
realms	List all realms	list_realms
realm <id>	Realm details + policies	get_realm_details
policies	List all issuing policies	list_issuing_policies
policy <id>	Issuing policy details	get_issuing_policy_details
trust-stores	List all trust stores	list_trust_stores
trust-store <id>	Trust store details + certs	get_trust_store_details + list_trust_store_certificates

Connection

Use /connection to view, test, or change the current NHI MCP connection.

Action	Description
/connection	Show current endpoint URL, auth type, and defaults from .mcp.json
/connection test	Verify connectivity by calling list_realms via MCP
/connection change	Reset cached credentials and switch to a new endpoint or key

Notes

• Certificate operations go through the nhi MCP server.
• For destructive operations (revoke, retire, rollback), always confirm with the user before calling the tool.
• history_id is the certificate's unique identifier — use list to find it if you only have a name.
• Supported export formats: der, pkcs7. Always write to a file and confirm the path — do not echo raw bytes.
• Revocation reasons:
  • UNSPECIFIED
  • KEY_COMPROMISE
  • CERTIFICATE_AUTHORITY_COMPROMISE
  • AFFILIATION_CHANGED
  • SUPERSEDED
  • CESSATION_OF_OPERATION
  • PRIVILEGE_WITHDRAWN
  • A_A_COMPROMISE