Skip to main content
Glama

ssl_check

Read-onlyIdempotent

When does this host's certificate expire? — TLS probe for host=: subject, issuer, validFrom/validTo, daysRemaining, expired/expiringSoon, fingerprint. GO/HOLD/STOP from dates. Chain trust is not asserted — dates and identity fields are. Required input: host. Priced $0.01 per call over x402 on Base; send a prepaid x-credit-token header for unlimited calls, or get 1 free call/day per tool. No wallet or API key required.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
hostYesHostname
portNoPort (optional)

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
dataNoThe result payload. Shape is service-specific; every field is documented in the tool description.
serviceNoThe service id that answered.
checkedAtNoISO-8601 timestamp of when the underlying reads were taken.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only, idempotent, and non-destructive behavior. The description adds valuable transparency beyond those hints: it explicitly states that chain trust is not asserted while dates and identity fields are, and it discloses the pricing model, free-call allowance, and lack of wallet/API-key requirement. This is meaningful behavioral context for an agent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose and outputs, and the extra pricing/payment details are relevant to invocation. It is slightly dense with multiple clauses, but every sentence contributes useful information. It could be tightened, but it is not bloated.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the annotations, output schema, and 100% schema parameter coverage, the description is largely complete. It covers the tool's scope, limitations, pricing, and key outputs. Minor gaps remain such as default port behavior and explicit threshold definitions for GO/HOLD/STOP, but these do not seriously impede correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description confirms host as required input and uses the host= phrasing, but it adds no semantically new information about either parameter. The optional port parameter is not elaborated beyond what the schema already states.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies a specific resource and action: a TLS probe of a host's certificate to determine expiration. It enumerates concrete outputs (subject, issuer, validFrom/validTo, daysRemaining, expired/expiringSoon, fingerprint) and states the decision outcome (GO/HOLD/STOP), which separates it from sibling domain/URL/risk tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied through the certificate-expiration focus and GO/HOLD/STOP decision framing, but the description does not explicitly state when to use this tool versus alternatives like domain_check or url_risk. It also does not provide when-not-to-use guidance or name any sibling tool for comparison.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources