keygen

Generate Ed25519 signing keys


Synopsis

mcptrust keygen [flags]

Generates a new Ed25519 keypair.

  • mcptrust.key: Private key (KEEP SECRET)
  • mcptrust.pub: Public key (Share with verifying parties)

Flags

FlagDefaultDescription
-h, --helphelp for keygen
--private"private.key"Path for the private key file
--public"public.key"Path for the public key file
--public"public.key"Path for the public key file

Security Note

The private key is unencrypted on disk (PEM format). Store it immediately in a secure secrets manager (e.g., Vault, AWS Secrets Manager, GitHub Secrets). Do not commit the private key to version control.