Integration

SignPath integration

SignPath is a code signing service. An agent can submit a file for signing (or a URL SignPath downloads it from) under a project and signing policy, follow the signing request until it is completed, approve, deny, cancel or resubmit requests, and download the signed artifact and the certificate used. It can also read the organization's projects, signing policies, certificates, users, groups, pipeline policies and trusted build systems. Not included: creating or editing configuration (projects, policies, certificates, users, groups), API token management, hash and message signing, the XML configuration routes and the pre-release audit log. Authentication is a SignPath API token (a CI user's or your own) sent as a Bearer token, plus your organization id, shown on the signing policy page.

Connect SignPath How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in SignPath.Built from the 43 SignPath tools below, on the connection you add once.

What you can do with SignPath

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Signing request, 8 operations

approve_signing_requestApprove signing requestPOSTApproves a signing request waiting for approval, as the authenticated approver. Once the required number of approvals is met the request is signed. Returns no body.
cancel_signing_requestCancel signing requestPOSTCancels a signing request that has not reached a final status, if SignPath still allows it. Returns no body.
deny_signing_requestDeny signing requestPOSTDenies a signing request; it is immediately marked as Denied and will not be signed. Returns no body.
get_signing_requestGet signing requestGETGets a signing request by id: status, workflow status, project, signing policy, artifact configuration, submitter, links to the unsigned and signed artifacts and origin data.
list_signing_requestsList signing requestsGETLists signing requests, filtered by submission time, project, artifact configuration, signing policy, certificate or status. Returns signingRequests and pagination.
resubmit_signing_requestResubmit signing requestPOSTResubmits a completed signing request, optionally under a different signing policy (for example from test-signing to release-signing). Returns no body; find the new request with list_signing_requests.
submit_signing_requestSubmit signing requestPOSTSubmits a file (artifact fileRef) for signing under projectSlug plus signingPolicySlug, or signingPolicyId; returns the signing request with its signingRequestId. Poll get_signing_request_status until isFinalStatus is true.
submit_signing_request_from_urlSubmit signing request from urlPOSTSubmits a signing request whose artifact SignPath downloads from a URL (for huge files), under projectSlug plus signingPolicySlug or signingPolicyId. Poll get_signing_request_status until isFinalStatus is true.

Certificate, 3 operations

get_certificateGet certificateGETGets a certificate object by slug (from list_certificates): type, purpose, key algorithm, status and X.509 or GPG details.
get_signing_policy_certificateGet signing policy certificateGETGets the certificate a signing policy signs with: its type, purpose, key algorithm, status and X.509 details.
list_certificatesList certificatesGETLists the certificate objects of the organization (X.509 and GPG) with their slugs, purpose, key algorithm and status.

Chain, 3 operations

download_certificate_chainDownload certificate chainGETDownloads the X.509 certificate chain (may be partial) of a certificate object (slug from list_certificates), as a file.
download_signing_policy_certificate_chainDownload signing policy certificate chainGETDownloads the X.509 certificate chain (may be partial) of a signing policy's certificate, as a file.
download_signing_request_certificate_chainDownload signing request certificate chainGETDownloads the X.509 certificate chain (may be partial) used to sign this request, as a file.

Gpg public key, 3 operations

download_certificate_gpg_keyDownload certificate gpg keyGETDownloads the GPG public key of a certificate object (slug from list_certificates), as a file.
download_signing_policy_gpg_keyDownload signing policy gpg keyGETDownloads the GPG public key of a signing policy's certificate, as a file.
download_signing_request_gpg_keyDownload signing request gpg keyGETDownloads the GPG public key used to sign this request, as a file.

Interactive user, 3 operations

get_current_interactive_userGet current interactive userGETGets the authenticated interactive user, when the API token belongs to a person.
get_interactive_userGet interactive userGETGets an interactive user by id (from list_interactive_users): name, email addresses, role, status and pending invitation.
list_interactive_usersList interactive usersGETLists the interactive (human) users of the organization.

Pipeline policy, 3 operations

get_pipeline_policyGet pipeline policyGETGets a pipeline policy by slug (from list_pipeline_policies), with its internal and external configuration.
list_connector_pipeline_policiesList connector pipeline policiesGETLists the pipeline policies available to connectors in this organization.
list_pipeline_policiesList pipeline policiesGETLists the pipeline policies of the organization with their slug, type and status.

X509 certificate, 3 operations

download_certificateDownload certificateGETDownloads the X.509 certificate of a certificate object (slug from list_certificates), as a file.
download_signing_policy_certificateDownload signing policy certificateGETDownloads the X.509 certificate of a signing policy's certificate, as a file.
download_signing_request_certificateDownload signing request certificateGETDownloads the X.509 certificate used to sign this request, as a file.

Ciuser, 2 operations

get_ciuserGet ciuserGETGets a CI user by id (from list_ci_users): name, role, description, notification email and status.
list_ci_usersList ci usersGETLists the CI users (machine accounts with an API token) of the organization.

Project, 2 operations

get_projectGet projectGETGets a project by slug (from list_projects): its repository URLs, artifact configurations, signing policies, readers and configurators.
list_projectsList projectsGETLists the projects of the organization with their slugs, status and signing policies.

Signing policy, 2 operations

get_signing_policyGet signing policyGETGets a signing policy of a project: its submitters, approvers, required approvals, certificate and origin verification settings.
list_my_signing_policiesList my signing policiesGETLists the signing policies the authenticated user may submit signing requests to, with their certificates, optionally filtered by project or policy slug.

Trusted build system, 2 operations

get_trusted_build_systemGet trusted build systemGETGets a trusted build system by slug (from list_trusted_build_systems).
list_trusted_build_systemsList trusted build systemsGETLists the trusted build systems (CI systems allowed to submit with origin verification) of the organization.

User group, 2 operations

get_user_groupGet user groupGETGets a user group by id (from list_user_groups), with its members and status.
list_user_groupsList user groupsGETLists the user groups of the organization.

Ci user, 1 operation

get_current_ci_userGet current ci userGETGets the authenticated CI user, when the API token belongs to a CI user.

Csr, 1 operation

download_certificate_csrDownload certificate csrGETDownloads the certificate signing request (CSR), if any, of a certificate object (slug from list_certificates), as a file.

Organization, 1 operation

get_organizationGet organizationGETGets the organization's name, subscription type and quotas.

Signed artifact, 1 operation

download_signed_artifactDownload signed artifactGETDownloads the signed artifact of a completed signing request as a file. Check get_signing_request_status first: the file exists only once status is Completed.

Signing request status, 1 operation

get_signing_request_statusGet signing request statusGETGets the status of a signing request (InProgress, WaitingForApproval, Completed, Failed, Denied, Canceled), its workflow step, and isFinalStatus, which is true once nothing more will happen.

Unsigned artifact, 1 operation

download_unsigned_artifactDownload unsigned artifactGETDownloads the original, unsigned artifact that was submitted with a signing request, as a file.

User, 1 operation

get_current_userGet current userGETGets the authenticated user (CI user or interactive user) behind the API token: id, name, role and status. Useful to check the connection.

Use SignPath from Claude Code, Cursor or Codex

Connect SignPath in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its SignPath operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect SignPath

Create your workspace
Sign up free. Nothing to install.
Connect SignPath once
Add your SignPath connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.