Security · self-hosted

Step CA in one click.

Step CA is a private acme cert authority for internal tls you can run on your own machine. Launch it in Even Stacks in one click, serve it over trusted HTTPS, and let your AI agents operate it.

Get Even, launch Step CA Official site

What is Step CA?

Step CA is an open-source online certificate authority supporting ACME, OIDC, and other automated certificate provisioning protocols. It is designed to issue and manage private TLS certificates for internal infrastructure.

CategorySecurity

Default port8611

Container imagesmallstep/step-ca:0.27.4

Official sitesmallstep.com/certificates/

Sourcegithub.com/smallstep/certificates

Run Step CA in Even

Even Stacks launches Step CA as a managed container on your own machine. No compose files, no manual setup.

Open the Even Stacks panel in Even. The container engine starts on demand.
Find Step CA in the one-click services and click Launch.
Even pulls the image, starts it on port 8611, and serves it over trusted HTTPS at https://step-ca.localhost.

Drive Step CA with your AI agents

Even ships an MCP, so any agent you run inside Even (Claude Code, Codex, and more) can operate Step CA directly, at both the UI level and the container level.

Through the Even MCP an agent can run commands inside it, manage entries, and read its logs. It runs commands inside the container, reads its logs, and for web apps opens and clicks through the interface in Even's own browser pane. Ask once, for example "set up Step CA and get it ready", and the agent handles it end to end.

How agents reach it: Initialize on first run with `docker exec -it step-ca step ca init`; config and keys persist in the /home/step volume. Issue certificates via ACME at https://<host>/acme/acme/directory or with the `step ca certificate` CLI from a client that trusts the root CA. Distribute /home/step/certs/root_ca.crt to all clients that need to trust this CA.

More Security services

Other one-click services you can launch in Even Stacks.