---
title: "Signpath integration for LuumenAI"
url: "https://www.luumen.ai/integrations/signpath/"
entity: SoftwareIntegration
category: "Identity & security"
audience: "SRE, DevOps, platform engineering, IT operations"
---

# Signpath integration for LuumenAI

Read your SignPath certificates, projects, and signing policies in context

## What LuumenAI can do with Signpath

LuumenAI connects to Signpath with an API token and exposes 5 tools (5 read-only). Every tool is read-only, so it can answer questions from Signpath but cannot change anything in it. Read actions still follow the configured access and approval policy.

## Key facts

- Authentication: API token
- Tools available: 5 tools (5 read-only)
- Deployment: scoped as part of your Pilot, Platform, or Managed rollout
- Category: Identity & security

## About Signpath with LuumenAI

When a release stalls on code signing, you need facts fast. Connect SignPath with an API key and Luumen answers from your organization directly: which certificates exist, what projects are configured, what a signing policy actually requires, and whether the API is healthy. Read-only, so nothing changes in SignPath.

## Example tools

Read-only (5 in total):

- `SIGNPATH_GET_HEALTH_CHECK` — Check if the SignPath API is healthy and operational.
- `SIGNPATH_LIST_CERTIFICATES` — Retrieve all certificates available in a SignPath organization.
- `SIGNPATH_LIST_PROJECTS` — List all projects for an organization.
- `SIGNPATH_RETRIEVE_SIGNING_POLICY_DETAILS` — Retrieve signing policy details for code signing operations.
- `SIGNPATH_RETRIEVE_SYSTEM_INFO` — Retrieves SignPath system information including the application version and the web UI base URL.

## Frequently asked questions

### How does LuumenAI connect to Signpath?

Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.

### Can LuumenAI change things in Signpath on its own?

No. Every one of the 5 tools is read-only, so LuumenAI can answer questions from Signpath but cannot change anything in it. Read actions still follow the configured access and approval policy.

### Is there an audit trail?

Every call to Signpath is recorded with the actor, the input, and the result.

Full page: https://www.luumen.ai/integrations/signpath/