Skip to main content
Glama

cert.decode

解析证书(PEM / base64-DER / 裸 DER):全字段展开 + 整链吊销检查(OCSP / CRL,含交叉证书)+ 上传链时验证匹配关系并识别根证书。

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "cert": "<cert>"
    },
    "name": "cert.decode"
  }
}

Input Schema

NameRequiredDescriptionDefault
certYes证书内容:PEM(可为多证书 bundle)/ base64-DER / 裸 DER
chainNo可选;补充证书链(leaf 与链分文件时)。PEM / base64-DER / 裸 DER
check_revocationNo是否执行整链吊销检查(OCSP / CRL,含交叉证书),默认 true

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden, and it does disclose real behavior: whole-chain revocation via OCSP/CRL including cross-certificates, plus chain-matching verification and root identification. However, it omits operationally important traits — that revocation checking implies network calls/latency, what happens when a cert is revoked (error vs. report), and whether failures abort decoding.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single dense sentence with the action and accepted formats front-loaded, followed by capability clauses. It is efficient with no filler, though the parenthetical stacking (formats, OCSP/CRL, cross-certificates) makes it slightly harder to scan.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 3-parameter tool with no output schema and no annotations, the description covers the main capability set and hints at return content ('全字段展开'). It still leaves the agent without guidance on output shape, revocation-check failure semantics, or behavior when the supplied chain does not match.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all three parameters, making 3 the baseline. The description adds modest value by explaining the purpose of 'chain' (validating match relationships when the leaf and chain are in separate files), but gives no extra detail on 'cert' bundle handling or the effect of disabling 'check_revocation'.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (解析/parse) plus the resource (证书) and enumerates accepted encodings, so the agent knows exactly what the tool consumes. It also lists the substantive outputs (full field expansion, whole-chain revocation, chain matching, root identification). It never names a sibling (cert.match, csr.decode, inspect.run), so differentiation is left to inference.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: the tool is for decoding a certificate, and the 'chain' clause hints at the split-file case. There is no explicit when-to-use-vs-alternatives guidance — nothing says when to prefer cert.decode over inspect.run or cert.match, and no exclusions or prerequisites are given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.