CertGuard

dev.workers.mike-tusa.certguard/certguardVersion 0.3.0

Free SSL/TLS certificate checker: expiry, chain trust, hostname match, TLS version, A/B/C/F grade.

Status

Responds131 msNov 14, 2026, 14:28 UTCAnswered our handshake without sign-in.

We could not refresh it, so this page shows the last copy.

Data from the official MCP Registry, checked by run.zero. How we check

Streamable HTTP

https://certguard.mike-tusa.workers.dev/mcpResponds131 msNov 14, 2026, 14:28 UTC

No sign-in

claude mcp add --transport http certguard https://certguard.mike-tusa.workers.dev/mcp

1
2
3

Settings > Connectors > Add custom connector
Name: certguard
Remote MCP server URL: https://certguard.mike-tusa.workers.dev/mcp

{
  "mcpServers": {
    "certguard": {
      "url": "https://certguard.mike-tusa.workers.dev/mcp"
    }
  }
}

code --add-mcp '{"name":"certguard","type":"http","url":"https://certguard.mike-tusa.workers.dev/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

1 tools

Tools of CertGuard
	Description		Read-only	Idempotent	Open world
`check_certificate`Run a live TLS handshake against host:port and audit the certificate the server presents. Returns an A/B/C/F grade and summary, expiry (days remaining), hostname match, chain completeness and trust against Mozilla's root store, negotiated TLS version and cipher suite, key type/size, findings, and a link to the full report. Revocation (OCSP/CRL) is NOT checked. Hosts on Cloudflare's own network cannot be checked live (result: isError with code live_check_unavailable, no grade); a failed handshake returns check_failed with no grade. Read-only: it only opens a TLS connection to the public host. Same engine, cache and limits as the CertGuard JSON API (GET /api/v1/check).	Run a live TLS handshake against host:port and audit the certificate the server presents. Returns an A/B/C/F grade and summary, expiry (days remaining), hostname match, chain completeness and trust against Mozilla's root store, negotiated TLS version and cipher suite, key type/size, findings, and a link to the full report. Revocation (OCSP/CRL) is NOT checked. Hosts on Cloudflare's own network cannot be checked live (result: isError with code live_check_unavailable, no grade); a failed handshake returns check_failed with no grade. Read-only: it only opens a TLS connection to the public host. Same engine, cache and limits as the CertGuard JSON API (GET /api/v1/check).	No	Yes	Yes	Yes

Registry status: Active
Published: Nov 1, 2026
Updated: Nov 1, 2026
Website: https://certguard.mike-tusa.workers.dev/⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): SecuritySuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared