All servers · Monitoring & logs · Cloud & networking · Email & messaging

certdesk

dev.certdesk/certdesk · v0.9.0

Tools changed (7 days)

Measured by MCP Station

Last check	Reachable
Checked at	—
Check success 7 / 30 days	—
First-try success 30 days	—
Median response	—
Lookups 30 days	—
Authentication	No auth
MCP version	2025-06-18
Rank score	—
Declared risk	Can write (some tools are not declared read-only)
Capabilities declared	tools
Tool definitions	7 tools · with description 100% · input schema is an object 100% · read/destructive hints 100%

Description written by the publisher, not verified

TLS cert verdict (OK/WARN/CRITICAL/UNKNOWN) from the served chain: expiry, revocation, alerts

Connect

streamable-http · https://certdesk.dev/mcp

claude mcp add --transport http certdesk https://certdesk.dev/mcp

{
  "mcpServers": {
    "certdesk": {
      "url": "https://certdesk.dev/mcp"
    }
  }
}

Tools as reported by the server

check_certificate
Check one domain's TLS certificate and return a verdict: status OK | WARN | CRITICAL | UNKNOWN, judged from the certificate chain the server actually serves. Measured from Korean point A (full chain and CRL revocation) plus Korean point B and an overseas point on the Globalping public measurement ne
check_expiry
Verdict for up to 5 domains at once: status OK | WARN | CRITICAL | UNKNOWN per domain combining the served certificate (verification, days left, null when the server cannot be measured) and domain registration expiry (RDAP), plus Korean alert lines. Use this for inventories, CI gates (fail unless st
check_security
Security posture check of a web server (no port scanning): TLS protocol support (legacy 1.0/1.1 detection via a Korean network probe), security headers (HSTS/CSP/X-Content-Type-Options/anti-clickjacking/Referrer-Policy), HTTP→HTTPS redirect, and certificate key/signature strength. Returns per-item p
check_dns
DNS and hosting facts for a domain: nameservers with DNS provider, A/AAAA with IP owner (ASN), CNAME, MX, CAA (which CAs may issue), SPF/DMARC, DNSSEC, registrar and domain expiry (RDAP).
check_dns_propagation
Compare answers for one DNS record across resolvers: the authoritative nameservers, Korean ISPs (KT, SK Broadband, LG U+) and public resolvers (Cloudflare, Google, Quad9, OpenDNS), measured from a Korean network. Use it to confirm a TXT/CNAME for certificate domain validation (e.g. _acme-challenge)
explain_tls_error
Explain a TLS/SSL certificate error message from a browser, curl/OpenSSL, Java, Python, Node.js, Go or .NET: likely causes, fixes, and links to step-by-step guides (Korean). Works offline from a curated knowledge base.
watch_expiry
Subscribe an email address to free daily expiry monitoring of up to 5 domains (certificate, domain registration and security grade) with email alerts, plus an optional Slack/Discord/Telegram/webhook channel. Also alerts when Certificate Transparency logs show a new certificate for a domain from a CA

Tool changes

2026-10-20: check_certificate, check_expiry, check_security, check_dns, check_dns_propagation, explain_tls_error, watch_expiry
2026-10-16: check_certificate, check_expiry, check_security, check_dns, check_dns_propagation, explain_tls_error, watch_expiry

Website · JSON · Text for agents · Registry updated 2026-10-12