@guardbee/mcp-ssl-inspector
OfficialClick on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@@guardbee/mcp-ssl-inspectorCheck the SSL certificate and expiry status for example.com"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
@guardbee/mcp-ssl-inspector
TLS sertifikası, cipher suite ve protokol konfigürasyonlarını herhangi bir domain için inceleyen MCP sunucusu. Node.js yerleşik tls modülü kullanır — harici bağımlılık yoktur.
Özellikler
Sertifika Denetimi — Geçerlilik, süre dolumu (gün bazında), SHA-256 fingerprint, SAN'lar, issuer zinciri
Protokol Kontrolü — TLS 1.0/1.1 deprecated uyarısı, SSLv2/v3 kritik uyarısı
Cipher Analizi — NULL, EXPORT, RC4, DES, 3DES, anonim cipher tespiti
HSTS Kontrolü —
Strict-Transport-Securitybaşlığı, max-age, includeSubdomainsToplu Tarama — N domain'i paralel olarak tarar
Sertifika Expiry İzleme — Yaklaşan sona erişler için 🚨 / ⚠️ / ✅ simgeleri
12 Unit Test — Harici bağlantı gerektirmeyen saf mantık testleri
Related MCP server: TLS Radar
Hızlı Başlangıç
npm install -g @guardbee/mcp-ssl-inspectorclaude_desktop_config.json dosyasına ekleyin:
{
"mcpServers": {
"guardbee-ssl-inspector": {
"command": "npx",
"args": ["-y", "@guardbee/mcp-ssl-inspector"]
}
}
}MCP Tools
Tool | Açıklama |
| Tek bir domain için tam TLS denetimi (sertifika + cipher + protokol + HSTS) |
| Birden fazla domain'i paralel olarak denetler |
| N domain için sertifika son kullanma tarihlerini kontrol eder |
| Domain için ayrıntılı sertifika bilgisi (fingerprint, SAN, zincir, seri no) |
Örnek Kullanım
Claude'a şunu sorabilirsiniz:
"example.com'un SSL sertifikası geçerli mi?"
"Bu domain'lerin sertifikaları ne zaman sona eriyor: example.com, api.example.com, shop.example.com"
"example.com zayıf cipher suite kullanıyor mu?"
Örnek Çıktı
┌─ example.com:443
│ Protocol : TLSv1.3
│ Cipher : TLS_AES_256_GCM_SHA384 (256 bit)
│ Chain : depth=2 valid=yes
│ Cert CN : example.com
│ Validity : Mar 15 2024 → Jun 13 2024 (expires in 45 days)
│ SANs : example.com, www.example.com
│ Issuer : Let's Encrypt
│ SHA-256 : AA:BB:CC:DD:...
│ HSTS : enabled (max-age=31536000, includeSubdomains)
│ ✅ No security issues foundGüvenlik Bulguları
Bulgu | Severity | Açıklama |
| 🔴 Critical | Sertifika süresi dolmuş |
| 🔴 Critical | < 7 gün kaldı |
| 🟠 High | < 30 gün kaldı |
| 🟡 Medium | < 90 gün kaldı |
| 🟠 High | Zincir doğrulama hatası |
| 🟡 Medium | Subject Alternative Name yok |
| 🟠 High | TLS 1.0 veya 1.1 |
| 🔴 Critical | SSLv2 veya SSLv3 |
| 🔴 Critical | NULL/EXPORT/RC4/anon cipher |
| 🟡 Medium | HSTS başlığı bulunamadı |
| 🔵 Low | max-age < 15552000s |
CLI — CI/CD Entegrasyonu
MCP server moduna ek olarak doğrudan CLI olarak da kullanılabilir:
# Tek domain tam TLS denetimi
npx @guardbee/mcp-ssl-inspector inspect example.com
# Birden fazla domain
npx @guardbee/mcp-ssl-inspector inspect example.com api.example.com shop.example.com
# Özel port
npx @guardbee/mcp-ssl-inspector inspect example.com:8443
# Sertifika expiry kontrolü
npx @guardbee/mcp-ssl-inspector expiry example.com api.example.com
# Sadece critical'da başarısız ol
npx @guardbee/mcp-ssl-inspector inspect example.com --fail-on=critical
# JSON çıktı
npx @guardbee/mcp-ssl-inspector inspect example.com --format=jsonExit kodları: 0 = sorun yok · 1 = threshold üstü bulgu / süresi dolmuş sert · 2 = hata
guardbee.yml ile Konfigürasyon
Proje kökünde guardbee.yml oluşturarak CLI flag'lerini kalıcı hale getirebilirsiniz. CLI flag'leri her zaman dosya ayarlarını geçersiz kılar.
ssl-inspector:
fail-on: high # critical | high | medium | low
port: 443
hosts: # CLI'da domain verilmezse bu liste kullanılır
- example.com
- api.example.com
- shop.example.comÖrnek dosya için guardbee.example.yml dosyasına bakın.
GitHub Actions — Deployment Sonrası Kontrol
name: SSL Check
on:
workflow_run:
workflows: ["Deploy"]
types: [completed]
jobs:
ssl-check:
runs-on: ubuntu-latest
steps:
- name: Inspect SSL certificate
run: npx @guardbee/mcp-ssl-inspector inspect ${{ vars.DOMAIN }} --fail-on=high
- name: Check cert expiry (warn if < 30 days)
run: npx @guardbee/mcp-ssl-inspector expiry ${{ vars.DOMAIN }}Scheduled Expiry Monitor
name: Cert Expiry Monitor
on:
schedule:
- cron: "0 9 * * 1" # Her Pazartesi 09:00
jobs:
expiry:
runs-on: ubuntu-latest
steps:
- name: Check certificate expiry dates
run: |
npx @guardbee/mcp-ssl-inspector expiry \
example.com \
api.example.com \
shop.example.com \
--format=jsonGitLab CI
ssl-inspect:
image: node:20
script:
- npx @guardbee/mcp-ssl-inspector inspect $DOMAIN --fail-on=high
environment:
name: production
only:
- mainGeliştirme
npm install
npm test # 12 unit test
npm run build # TypeScript derlemeLisans
MIT — GuardBee
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
SSL/TLS scanning, free Let's Encrypt issuance, and certificate-expiry monitoring.
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
Scans remote MCP servers for protocol, security, and TLS issues; exposes scan tools via MCP.
Remote MCP server: 19 domain-hygiene and email-auth tools (DNS, SPF, DMARC, DKIM, TLS).
Related MCP Servers
- -licenseNot gradedqualityNot gradedmaintenanceEnables ethical security testing and attack surface management through SSL certificate validation, CVE queries, subdomain enumeration, security header analysis, and comprehensive reconnaissance capabilities. Designed for authorized penetration testing workflows with responsible disclosure practices.-
- AlicenseNot gradedqualityAmaintenanceFree SSL/TLS scanning and Let's Encrypt certificate issuance (private key stays local), plus certificate-expiry monitoring via one MCP server. Public scan and cert tools need no account.MIT
- AlicenseNot gradedqualityCmaintenanceEnables live TLS/SSL certificate health checks for any hostname, providing expiry, hostname match, trust verdict, and a health score. Supports both free and paid deep tiers with protocol/cipher analysis.MIT
- AlicenseAqualityBmaintenanceA domain security and privacy checker MCP server that runs locally, performing DNS, TLS, HTTP, and RDAP lookups to generate a scored report covering certificates, email authentication, DNS, and web security headers.378GPL 3.0