Boring Utils Expiry Watch MCP

A read-only MCP server that allows AI assistants to check TLS certificate validity and domain registration expiry dates. It provides tools to verify certificate trust, issuer, and expiration, as well as RDAP-based domain expiry lookups, without requiring user authentication.

Visit Boring Utils

Endpoint and access

No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.

Community listingStreamable HTTPNo sign-inEndpoint checked 2026-11-01Published by Boring Utils

You need:no account or API key

MCP endpoint (Streamable HTTP)

https://boringutils.com/api/mcp

Vendor documentation

What you can do with it

Check TLS certificate expiry and trust status
Look up domain registration expiry via RDAP
Verify certificate issuer and chain details
Monitor domain health for AI agents

Source and maintenance

Community listingRegistry 1.0.0

mcp-registry: io.github.hal-boring-utils/expiry-watch@1.0.0 Project website

Protocol and capabilities

Server: boringutils 1.0.0
MCP protocol: 2025-06-18
Tools: 2 advertised
Resources: Not advertised
Resource templates: Not advertised
Prompts: Not advertised

Server-advertised capabilities

{
  "tools": {}
}

Server-provided instructions

Untrusted server output shown for inspection. It is not Koskamo guidance and is excluded from knowledge search.

Read-only checks of a public domain: its TLS certificate (check_certificate) and its registration expiry over RDAP (check_domain_expiry). Results inform; they are not a security or compliance assessment.

Tools

2 advertised

check_certificate — Check a TLS certificate

Advertised by the server during the last successful anonymous check.

Advertised read-onlyOpen-world

Connects to a domain on port 443 and reports its TLS certificate: whether it is trusted and matches the name, the issuer, the expiry date and days left, the lifetime, the chain and the TLS version, what each of its server addresses serves (up to 4 IPv4 and 4 IPv6), and, for certificates from Let’s Encrypt, Google Trust Services, ZeroSSL or Sectigo, the renewal window the CA suggests (ACME Renewal Information).

check_certificate input schema

{
  "type": "object",
  "required": [
    "domain"
  ],
  "properties": {
    "domain": {
      "type": "string",
      "maxLength": 2048,
      "description": "A public domain name, like example.com. A URL also works: only its host name is used."
    }
  },
  "additionalProperties": false
}

check_certificate annotations

{
  "title": "Check a TLS certificate",
  "readOnlyHint": true,
  "openWorldHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}

check_domain_expiry — Check a domain registration expiry

Advertised by the server during the last successful anonymous check.

Advertised read-onlyOpen-world

Looks up a domain registration over RDAP at the registry for its TLD: when it expires, the registrar, the statuses (flagging a hold, redemption, pending delete or pending transfer) and the nameservers. Subdomains are looked up by their registered domain (www.example.co.uk becomes example.co.uk).

check_domain_expiry input schema

{
  "type": "object",
  "required": [
    "domain"
  ],
  "properties": {
    "domain": {
      "type": "string",
      "maxLength": 2048,
      "description": "A public domain name, like example.com. A URL also works: only its host name is used."
    }
  },
  "additionalProperties": false
}

check_domain_expiry annotations

{
  "title": "Check a domain registration expiry",
  "readOnlyHint": true,
  "openWorldHint": true,
  "idempotentHint": true,
  "destructiveHint": false
}

Prompts

Not advertised

No prompt definitions available.

Resources

Not advertised

No resource definitions available.

30-day availability

Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.

Successful checks: 1 of 1 (100%)
Average latency: 305 ms
95th percentile latency: 305 ms

Maintenance history

Public check and source-refresh events. Editorial and ownership records remain private.

Nov 1, 2026, 7:16 AM UTC · probe · passed · 305 ms · metadata changed · 2 tool(s)

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers the remote server. Use --scope project to write .mcp.json for the repo.

Claude Code configuration

claude mcp add --transport http boring-utils-expiry-watch-mcp https://boringutils.com/api/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).

Codex configuration

codex mcp add boring-utils-expiry-watch-mcp --url https://boringutils.com/api/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable boring-utils-expiry-watch-mcp in your MCP settings.

Cursor configuration

{
  "mcpServers": {
    "boring-utils-expiry-watch-mcp": {
      "url": "https://boringutils.com/api/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure).

Cline configuration

{
  "mcpServers": {
    "boring-utils-expiry-watch-mcp": {
      "type": "streamableHttp",
      "url": "https://boringutils.com/api/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start boring-utils-expiry-watch-mcp and inspect its tools.

VS Code configuration

{
  "servers": {
    "boring-utils-expiry-watch-mcp": {
      "type": "http",
      "url": "https://boringutils.com/api/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.

Gemini CLI configuration

gemini mcp add --transport http boring-utils-expiry-watch-mcp https://boringutils.com/api/mcp

Claude Desktop

Merge this into claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\), then restart Claude Desktop.

Claude Desktop configuration

{
  "mcpServers": {
    "boring-utils-expiry-watch-mcp": {
      "url": "https://boringutils.com/api/mcp"
    }
  }
}

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.

Windsurf configuration

{
  "mcpServers": {
    "boring-utils-expiry-watch-mcp": {
      "serverUrl": "https://boringutils.com/api/mcp"
    }
  }
}

Let your agent find its tools

Find servers like Boring Utils Expiry Watch MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows

See all 6,647