CipherTrust CAKM MCP Server

Example Use Cases

• 1

  Inspect and report unified TDE and EKM health/status across multiple SQL Server and Oracle database connections.

• 2

  Perform lifecycle management of cryptographic objects (create/list/rotate/drop DEKs and master keys) and manage EKM providers/credentials on SQL Server.

• 3

  Manage Oracle TDE deployments and wallets (setup HSM-only, add auto-login, rotate MEKs, detect migration states, and optionally restart databases).

Description

This project provides a Model Context Protocol (MCP) server to orchestrate Transparent Data Encryption (TDE) and external key manager (EKM) workflows for Microsoft SQL Server and Oracle databases using CipherTrust CAKM. It centralizes lifecycle operations for keys, wallets, EKM providers, and TDE deployments, and provides unified status, auditing, and migration detection for Oracle TDE scenarios. The server supports automated tasks like key rotation, wallet management (including auto-login), and optional automated database restarts as part of deployment workflows. It is distributed as an open-source tool with example configurations and integrations for AI assistant workflows.