certdesk
TLS cert verdict (OK/WARN/CRITICAL/UNKNOWN) from the served chain: expiry, revocation, alerts
Connect it
Settings → Connectors → Add custom connector
URL: https://certdesk.dev/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://certdesk.dev/mcp{
"mcpServers": {
"certdesk": {
"url": "https://certdesk.dev/mcp"
}
}
}claude mcp add --transport http certdesk https://certdesk.dev/mcp{
"servers": {
"certdesk": {
"type": "http",
"url": "https://certdesk.dev/mcp"
}
}
}7 tools, verified live
check_certificateread-onlyCheck one domain's TLS certificate and return a verdict: status OK | WARN | CRITICAL | UNKNOWN, judged from the certificate chain the server actually serves — measured from Korean point A (full chain and CRL revocation) plus Korean point B and an overseas point on the Globalping public measurement network (per-point results in measuredFrom; disagreement between points is a WARN) — verification (ex
check_expiryread-onlyVerdict for up to 5 domains at once: status OK | WARN | CRITICAL | UNKNOWN per domain combining the served certificate (verification, days left — null when the server cannot be measured) and domain registration expiry (RDAP), plus Korean alert lines. Use this for inventories, CI gates (fail unless status is OK) and periodic checks.
check_securityread-onlySecurity posture check of a web server (no port scanning): TLS protocol support (legacy 1.0/1.1 detection via a Korean network probe), security headers (HSTS/CSP/X-Content-Type-Options/anti-clickjacking/Referrer-Policy), HTTP→HTTPS redirect, and certificate key/signature strength. Returns per-item pass/warn/fail and an overall grade.
check_dnsread-onlyDNS and hosting facts for a domain: nameservers with DNS provider, A/AAAA with IP owner (ASN), CNAME, MX, CAA (which CAs may issue), SPF/DMARC, DNSSEC, registrar and domain expiry (RDAP).
check_dns_propagationread-onlyCompare answers for one DNS record across resolvers — the authoritative nameservers, Korean ISPs (KT, SK Broadband, LG U+) and public resolvers (Cloudflare, Google, Quad9, OpenDNS) — measured from a Korean network. Use it to confirm a TXT/CNAME for certificate domain validation (e.g. _acme-challenge) has propagated.
explain_tls_errorread-onlyExplain a TLS/SSL certificate error message from a browser, curl/OpenSSL, Java, Python, Node.js, Go or .NET: likely causes, fixes, and links to step-by-step guides (Korean). Works offline from a curated knowledge base.
watch_expirySubscribe an email address to free daily expiry monitoring of up to 5 domains (certificate, domain registration and security grade) with email alerts, plus an optional Slack/Discord/Telegram/webhook channel. Also alerts when Certificate Transparency logs show a new certificate for a domain from a CA not seen before (possible unauthorized issuance). Double opt-in: a confirmation email is sent and m
Alternatives in Other
Compare →JIJitsuA
Manage Jitsu data pipelines: destinations, streams, connections, functions, live events.
NRNew Relic MCP ServerOfficialA
Access New Relic observability data through MCP - query metrics, logs, traces, entities, and more
OSOpenCaseLaw — Swiss Caselaw, Statutes & DoctrineA
1M+ Swiss court decisions, statutes & doctrine with citation graph (DE/FR/IT). CC0, free, 42 tools.
BCBusiness Contact FinderA
Check how to contact a business website, and whether that contact path actually works.
DLDomain LivenessA
Is this business's website still there? Checks apex and www, and DNS separately from HTTP.
CAContact AffordanceA
Check how to contact a business website, and whether that contact path actually works.