Retrieve a chronological event log for an incident, including status changes, notifications, comments, screenshots, and diagnostics. Use it to audit incident activity and render timelines.
Create a new Conan project with specified dependencies and build system templates. Set up libraries or executables quickly by providing project name, version, and required packages.
Fetch a detailed incident card with status, start/end times, root cause, and per-location network diagnostics. Includes screenshot and replay link when enabled.
Build, parse, or analyze Content-Security-Policy headers with severity-ranked warnings. Assemble directives or audit existing policies for misconfigurations.
Generate ready-to-use OpenSSL commands for key generation, CSR creation, self-signed certificates, encryption, hashing, and more without executing anything.
Provides a unified tool for TLS certificate analysis with automatic OpenSSL integration, allowing users to fetch, analyze and assess security of TLS certificates without manual PEM handling.
Enables agents to cryptographically verify JWT HMAC-SHA256 signatures, validate claims and enforce expiration, and perform Merkle inclusion proofs, Schnorr zero-knowledge identification, and nonce replay protection. Runs as a zero-dependency stdio MCP server so clients like Claude Desktop, Cursor, and Windsurf can attest execution state without OpenSSL or external libraries.
Diagnose Python SSL/TLS certificate issues causing CERTIFICATE_VERIFY_FAILED or HTTPS failures. Get version details, CA bundle paths, live probes, a verdict, and concrete remediation steps.
Parse and read RFC 3161 timestamp responses, tokens, or TSTInfo structures, auto-detected, to inspect status, policy, imprint, serial, and genTime; this is not verification.
Describe a PKCS#8 private key's format, algorithm, curve, and encryption parameters without exposing password or key bytes; optionally import as a non-extractable Web Crypto key.
Describe a PKCS#12 (.p12/.pfx) file without its password—version, MAC, encryption schemes, and bag metadata—or supply the password to verify the MAC and open SafeContents, with no key bytes returned.
Open a PKCS#12 (.p12/.pfx) file to verify its MAC, decrypt SafeContents, import keys as non-extractable Web Crypto keys, parse certificates, count CRLs, and return an integrity verdict.
Sign PDFs with CMS or PAdES in a single call, auto-injecting a missing /Sig placeholder. Accepts DER certificate and key inputs and supports timestamps.
Search CVEs published within a recent window or since a date, enriched with EPSS exploit probability, CISA KEV status and risk scores to prioritize patching.
Computes SHA fingerprint, RFC 5280 key identifier, or SHAKE256 digest for a certificate, CSR, public key, or DER/PEM object, with configurable algorithm and hex formatting.
Stamps the action ledger's tail hash via an RFC 3161 Time-Stamping Authority, appends the returned token as a chained entry, and stores it for verification. Rejections are refused.
Identify built-in cryptographic and encoding techniques in LOL binaries such as certutil and openssl. Filter by platform and operation to locate encode, decode, encrypt, decrypt, or hash methods.
Identify known vulnerabilities in a software package by querying the OSV database for CVEs and security advisories, with optional version and ecosystem filters.
Search all agents for a software package by name or version, returning matching hosts to identify systems with specific software for vulnerability response.