Free SSL/TLS certificate checker: expiry, chain trust, hostname match, TLS version, A/B/C/F grade.
Connect Remote server
claude mcp add --transport http certguard https://certguard.mike-tusa.workers.dev/mcp --header "Authorization: Bearer <YOUR_API_KEY>"
{
"mcpServers": {
"certguard": {
"url": "https://certguard.mike-tusa.workers.dev/mcp",
"headers": {
"Authorization": "Bearer <YOUR_API_KEY>"
}
}
}
}
{
"servers": {
"certguard": {
"type": "http",
"url": "https://certguard.mike-tusa.workers.dev/mcp",
"headers": {
"Authorization": "Bearer <YOUR_API_KEY>"
}
}
}
}
Settings > Connectors > Add custom connector
URL: https://certguard.mike-tusa.workers.dev/mcp
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools 1 found in our last check
check_certificateRun a live TLS handshake against host:port and audit the certificate the server presents. Returns an A/B/C/F grade and summary, expiry (days remaining), hostname match, chain completeness and trust against Mozilla's root store, negotiated TLS version and cipher suite, key type/s…
Headers
| Name | Description |
|---|---|
AuthorizationOptional, secret | Optional. 'Bearer <key>' (free cg_ key) for higher limits. Works without a key. |
Details
| Endpoint | https://certguard.mike-tusa.workers.dev/mcp (Streamable HTTP) |
| First published | 1 Nov 2026 |
| Last updated | 1 Nov 2026 |
| Registry name | dev.workers.mike-tusa.certguard/certguard |
More other servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
