# Signpath — how to use (mcp.ai)

Connect your Signpath account and use 5 tools for security and identity straight from your AI agent. Connect with your own API key. SignPath is a code signing service that integrates with your build system to automate the signing of your software artifacts, ensuring their authenticity and integrity.

## Option A — via MCP (recommended)
Remote MCP endpoint (HTTP, streamable): `https://api.mcp.ai/p_signpath?ms=1787295720000`
Add it as a custom/remote MCP connector in your client (Claude, Cursor, VS Code…), then authenticate when prompted. Once connected, ask the agent to use the server's tools (e.g. `signpath_get_health_check`).

## Option B — via direct REST API
Base URL: `https://api.mcp.ai/api/signpath`
Auth: `Authorization: Bearer sk_live_…` — create a workspace API key at https://mcp.ai/settings/api-keys
Discover endpoints: `GET https://api.mcp.ai/api/signpath/_endpoints`

### Endpoints
- `POST https://api.mcp.ai/api/signpath/get/health/check` — Tool to check if the SignPath API is healthy and operational. Use this to verify API availability before performing other operations.
- `POST https://api.mcp.ai/api/signpath/list/certificates` — Retrieve all certificates available in a SignPath organization. Use this to discover certificate IDs needed for signing operations. Requires a valid organization_id which can be obtained from your Sig
- `POST https://api.mcp.ai/api/signpath/list/projects` — Tool to list all projects for an organization. Use after confirming the organization ID to retrieve and paginate project records.
  - body: { skip?: integer, take?: integer }
- `POST https://api.mcp.ai/api/signpath/retrieve/signing/policy/details` — Retrieve signing policy details for code signing operations. Returns certificate info, RSA key parameters, and policy metadata for the authenticated user's accessible signing policies. Without filters
  - body: { project_slug?: string, signing_policy_slug?: string }
- `POST https://api.mcp.ai/api/signpath/retrieve/system/info` — Retrieves SignPath system information including the application version and the web UI base URL. Use this tool to verify the SignPath installation version or to obtain the web interface URL.

## Example prompts
- "What can I do in Signpath?"
- "Show me a summary of my Signpath account"

## More
- Page: https://mcp.ai/signpath
- Agent spec (llms.txt): https://mcp.ai/signpath/llms.txt
- Postman collection: https://mcp.ai/signpath/postman.json