certdesk

check_certificate

Read-only

Check one domain's TLS certificate and return a verdict: status OK | WARN | CRITICAL | UNKNOWN, judged from the certificate chain the server actually serves — measured from Korean point A (full chain and CRL revocation) plus Korean point B and an overseas point on the Globalping public measurement network (per-point results in measuredFrom; disagreement between points is a WARN) — verification (expired, not yet valid, hostname mismatch, self-signed, untrusted root, missing intermediate, revoked via CRL), days left, renewal point, a newer certificate issued but not deployed (CT logs), the served chain and the issuing CA's incident history. If the server cannot be measured the status is UNKNOWN and CT logs are shown only as an estimate — never as OK. Set detail=true to include the full chain in the text output.

Input Schema

TableJSON Schema

Name	Required	Description
`port`	No	TLS port (default 443). Implicit TLS: 8443 4443 9443 6443 636 465 993 995 853 5061 3269 8883; STARTTLS: 25 587 (SMTP), 143 (IMAP), 110 (POP3), 389 (LDAP). Or pass domain as host:port
`detail`	No	Include the full certificate chain in the text output (default false)
`domain`	Yes	Domain name, e.g. example.com
`critDays`	No	Days before expiry that count as CRITICAL "expiring soon" (default 15; must be < warnDays)
`warnDays`	No	Days before expiry that count as WARN (default 30; the default shrinks for short-lived certificates)

Output Schema

TableJSON Schema

Name	Required	Description
`domain`	Yes
`status`	Yes	UNKNOWN = could not be measured (never treat as OK)
`reasons`	Yes
`headline`	Yes	One-line verdict (Korean)

Schema Changelog

Changes observed during successful MCP inspections.

Changed1 schema field changedOct 10, 2026

addedInput schema / properties / port

Added value: +{
+  "description": "TLS port (default 443). Implicit TLS: 8443 4443 9443 6443 636 465 993 995 853 5061 3269 8883; STARTTLS: 25 587 (SMTP), 143 (IMAP), 110 (POP3), 389 (LDAP). Or pass domain as host:port",
+  "type": "integer"
+}

Changed2 schema fields changedOct 4, 2026

addedInput schema / properties / critDays

Added value: +{
+  "description": "Days before expiry that count as CRITICAL \"expiring soon\" (default 15; must be < warnDays)",
+  "maximum": 365,
+  "minimum": 1,
+  "type": "integer"
+}

addedInput schema / properties / warnDays

Added value: +{
+  "description": "Days before expiry that count as WARN (default 30; the default shrinks for short-lived certificates)",
+  "maximum": 365,
+  "minimum": 1,
+  "type": "integer"
+}

Changed2 schema fields changedOct 3, 2026

addedInput schema / properties / detail

Added value: +{
+  "description": "Include the full certificate chain in the text output (default false)",
+  "type": "boolean"
+}

changedOutput schema / (root)

Previous value: -nullNew value: +{
+  "properties": {
+    "domain": {
+      "type": "string"
+    },
+    "headline": {
+      "description": "One-line verdict (Korean)",
+      "type": "string"
+    },
+    "reasons": {
+      "items": {
+        "properties": {
+          "code": {
+            "type": "string"
+          },
+          "message": {
+            "type": "string"
+          },
+          "messageEn": {
+            "type": "string"
+          },
+          "severity": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "code",
+          "severity"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "status": {
+      "description": "UNKNOWN = could not be measured (never treat as OK)",
+      "enum": [
+        "OK",
+        "WARN",
+        "CRITICAL",
+        "UNKNOWN"
+      ],
+      "type": "string"
+    }
+  },
+  "required": [
+    "domain",
+    "status",
+    "headline",
+    "reasons"
+  ],
+  "type": "object"
+}

First observedSep 26, 2026

TDQS

Score is being calculated.

All certdesk tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources

Need Help?