CertGuard
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
CertGuard
Free SSL/TLS certificate checker: expiry, chain trust, hostname match, TLS version, A/B/C/F grade.
Live service
Web app and API: https://certguard.mike-tusa.workers.dev/
Support: digitalpromohub.support@gmail.com
Related MCP server: ssl-doctor
Use it from an AI assistant (MCP)
CertGuard is a remote MCP server (Streamable HTTP) at https://certguard.mike-tusa.workers.dev/mcp. Tools: check_certificate.
Cursor and Windsurf accept this config:
{
"mcpServers": {
"certguard": {
"type": "http",
"url": "https://certguard.mike-tusa.workers.dev/mcp"
}
}
}Cline (MCP Servers > Remote Servers, or cline_mcp_settings.json) needs "type": "streamableHttp":
{
"mcpServers": {
"certguard": {
"type": "streamableHttp",
"url": "https://certguard.mike-tusa.workers.dev/mcp"
}
}
}Claude Desktop: open Settings > Connectors, choose "Add custom connector" and paste https://certguard.mike-tusa.workers.dev/mcp. Or, for clients that only support local (stdio) servers, use the mcp-remote bridge: npx mcp-remote https://certguard.mike-tusa.workers.dev/mcp.
VS Code uses a servers key instead of mcpServers.
The server.json file is the MCP Registry manifest for this server.
Run your own copy
Requires Node.js 22+ and a Cloudflare account.
npm install
npx wrangler@4 dev # local dev serverwrangler.toml is a template: create your own KV namespaces / D1 databases / rate-limit namespaces and replace the <PLACEHOLDER> values before npx wrangler@4 deploy. Any secrets the Worker reads go in wrangler secret put (or .dev.vars locally), never in the repo.
Optional Worker secrets (leave unset if you do not need them): RAPIDAPI_PROXY_SECRET (only needed if you sell the API through RapidAPI; it must match the X-RapidAPI-Proxy-Secret header RapidAPI adds).
Third-party data
src/roots.js is generated from the Mozilla root store (via curl's cacert.pem), which Mozilla publishes under MPL-2.0 (https://mozilla.org/MPL/2.0/).
License
MIT (c) Digital Promo Hub. See LICENSE.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
This server cannot be deployed
Maintenance
Related MCP Connectors
Monitors TLS/SSL certificate expiry, DNS resolution, and TCP port status for AI agents.
Free SSL/TLS certificate checker: expiry, chain trust, hostname match, TLS version, A/B/C/F grade.
Check a website's TLS certificate and how many days until it expires.
1HTTP, DNS, SSL, WHOIS, ping, security-header, SEO and AI-readiness checks for any website.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceProvides a unified tool for TLS certificate analysis with automatic OpenSSL integration, allowing users to fetch, analyze and assess security of TLS certificates without manual PEM handling.2MIT
- AlicenseNot gradedqualityCmaintenanceEnables live TLS/SSL certificate health checks for any hostname, providing expiry, hostname match, trust verdict, and a health score. Supports both free and paid deep tiers with protocol/cipher analysis.MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to check SSL/TLS certificate validity, expiry, issuer, chain details, and security grade for any domain via pay-per-call x402 micropayments.MIT
- AlicenseNot gradedqualityCmaintenanceEnables AI agents to validate SSL/TLS certificates, monitor expiration, verify certificate chains, assess security posture, and receive A-F security grades, with micropayment-protected access via x402.MIT