---
title: "TLS / X.509 PKI Migration Planner"
method: POST
path: "/v1/tools/plan_tls_pki_migration"
tags: ["TODO_TAGS_REVIEW", "TODO_AP2_EXPORT_REVIEW"]
---

# TLS / X.509 PKI Migration Planner

`POST /v1/tools/plan_tls_pki_migration`

## Request

- Base URL: `https://ainumbers.co`
- URL: `https://ainumbers.co/v1/tools/plan_tls_pki_migration`
- Auth: none declared

Sequences TLS and X.509 PKI migration from RSA/ECDSA to post-quantum algorithms (ML-KEM/ML-DSA per NIST FIPS 203/204 Aug 2024). Builds a phased plan (root CAs -> intermediates -> leaf certificates), models payload impact for hybrid/composite/replace strategies, and flags interoperability risks. Reuses CBOM inventory from tool 499.

**Tool URL:** https://ainumbers.co/chaingraph/art-86-tls-pki-migration-planner.html

## Request body

- object
  - `interop_constraints` unknown
  - `inventory_ref` string: type not evidenced by kernel source
  - `migration_strategy` string: type not evidenced by kernel source
  - `pki` unknown

## Response `200`

Successful tool execution result

- object
  - `algorithm_refs` object
    - `hybrid_overhead_mult` number
    - `ml_dsa_65_sig_bytes` integer
    - `ml_kem_768_pk_bytes` integer
    - `rsa2048_sig_bytes` integer
  - `estimated_total_weeks` integer
  - `interop_risks` string[]
  - `inventory_ref` string
  - `migration_plan` object[]
    - `effort_weeks` integer
    - `notes` string
    - `phase` integer
    - `target` string
  - `note` string
  - `payload_impact_bytes` integer
  - `pki_summary` object
    - `intermediate_count` integer
    - `leaf_population` integer
    - `root_cas` integer
    - `tls_versions` unknown[]
      - unknown
  - `reference_version` string
  - `rollback_points` string[]
  - `strategy` string

---

[API](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite.md) · [All operations](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/llms.txt) · [OpenAPI document](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/revisions/b462e4f5bb28?raw)