Skip to main content
Glama
certindex

certindex-mcp

by certindex
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
CERTINDEX_API_KEYYesYour CertIndex API key. Mint one at https://ctindex.io/app/keys
CERTINDEX_TIMEOUTNoPer-request HTTP timeout (seconds)30
CERTINDEX_BASE_URLNoOverride for self-hosted deployments / staginghttps://api.ctindex.io

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Features and capabilities supported by this server

Protocol revision2025-11-25

CapabilityDetails
tools
{
  "listChanged": false
}
prompts
{
  "listChanged": false
}
resources
{
  "subscribe": false,
  "listChanged": false
}
experimental
{}

Tools

Functions exposed to the LLM to take actions

NameDescription
search_certificatesA

Search the CT certificate index by domain, CN, issuer, SAN, validity, or wildcard status. Returns a has_more boolean for paging (no unbounded COUNT).

get_certificateA

Fetch a single cert by its 64-char hex SHA-256 fingerprint.

Set include_enrichment=true to attach RDAP + DNS + ASN/hosting context for the cert's primary hostname under enrichment.

get_domain_certificatesA

List certificates for an exact domain name. Cold domains return a backfill_status sentinel; retry per the hint.

Set include_enrichment=true to attach RDAP + DNS + ASN/hosting context for the domain under enrichment.

get_subdomainsB

Enumerate unique subdomains seen in CT logs.

get_latest_certA

Most recently issued cert for a domain (or {cert: null} with a backfill sentinel on cold domains).

Set include_enrichment=true to attach RDAP + DNS + ASN/hosting context for the domain under cert.enrichment.

get_expiring_certsB

Certificates for domain expiring within days days.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Deploy Server
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A3.9/5.0

Scored across 6 tools

Disambiguation5/5

Each tool has a distinct purpose: fetching a single certificate by fingerprint, listing certificates for a domain, finding expiring certs, getting the latest cert, enumerating subdomains, and performing a general search. No ambiguity between them.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern in snake_case (e.g., get_certificate, get_domain_certificates). The naming is predictable and clear.

Tool Count5/5

With 6 tools covering the core operations of a certificate index (fetch, list, search, subdomain enumeration), the count is well-scoped and not excessive.

Completeness4/5

The set covers the main operations expected from a CT log index: retrieval by fingerprint, domain listing, expiry checks, latest cert, subdomain enumeration, and general search. Minor gaps like raw log entry access are not critical for the stated purpose.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources