IDigiTrust SSL Toolkit MCP

A free SSL/PKI toolkit providing an MCP endpoint for AI assistants to perform HTTPS audits including GM/SM2 support, generate CSRs, pre-check Domain Control Validation (DCV), and convert certificate formats like PEM, P12, and JKS.

Endpoint and access

No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.

Community listingStreamable HTTPNo sign-inEndpoint checked 2026-11-01Published by IDigiTrust

MCP endpoint (Streamable HTTP)

https://tools.idigitrust.com/api/v1/mcp

Vendor documentation

What you can do with it

Run HTTPS audits with protocol and cipher suite rating
Generate RSA or ECC private keys and CSRs
Pre-check DCV via DNS TXT or HTTP file methods
Convert certificates between PEM, P12, and JKS formats

Source and maintenance

Community listingRegistry 1.5.0

mcp-registry: io.github.Mintreetech/ssl-toolkit-mcp@1.5.0 Source repository

Maintenance checked: Nov 1, 2026, 8:45 AM UTC

Protocol and capabilities

Server: ssl-toolkit v1.6.1
MCP protocol: 2025-06-18
Tools: 8 advertised
Resources: Not advertised
Resource templates: Not advertised
Prompts: Not advertised

Server-advertised capabilities

{
  "tools": {
    "listChanged": false
  }
}

Tools

8 advertised

cert.decode

Advertised by the server during the last successful anonymous check.

解析证书(PEM / base64-DER / 裸 DER):全字段展开 + 整链吊销检查(OCSP / CRL，含交叉证书)+ 上传链时验证匹配关系并识别根证书。

cert.decode input schema

{
  "type": "object",
  "required": [
    "cert"
  ],
  "properties": {
    "cert": {
      "type": "string",
      "description": "证书内容:PEM(可为多证书 bundle)/ base64-DER / 裸 DER"
    },
    "chain": {
      "type": "string",
      "description": "可选;补充证书链(leaf 与链分文件时)。PEM / base64-DER / 裸 DER"
    },
    "check_revocation": {
      "type": "boolean",
      "description": "是否执行整链吊销检查(OCSP / CRL，含交叉证书),默认 true"
    }
  }
}

cert.match

Advertised by the server during the last successful anonymous check.

证书 / 私钥 / CSR 匹配验证(SubjectPublicKeyInfo SHA-256 指纹比对)。

cert.match input schema

{
  "type": "object",
  "required": [
    "mode"
  ],
  "properties": {
    "csr": {
      "type": "string",
      "description": "CSR PEM"
    },
    "key": {
      "type": "string",
      "description": "私钥 PEM"
    },
    "cert": {
      "type": "string",
      "description": "证书 PEM"
    },
    "mode": {
      "enum": [
        "cert-key",
        "cert-csr",
        "key-csr"
      ],
      "type": "string"
    },
    "password": {
      "type": "string",
      "description": "加密私钥的密码(可选)"
    }
  }
}

convert.run

Advertised by the server during the last successful anonymous check.

证书 / 密钥格式转换:PEM / P12 / JKS 任意方向(含同格式重置密码)。

convert.run input schema

{
  "type": "object",
  "required": [
    "source_kind",
    "target_kind"
  ],
  "properties": {
    "key_pem": {
      "type": "string",
      "description": "PEM 源:私钥"
    },
    "cert_pem": {
      "type": "string",
      "description": "PEM 源:证书"
    },
    "chain_pem": {
      "type": "string",
      "description": "PEM 源:链(可选)"
    },
    "source_kind": {
      "enum": [
        "pem",
        "p12",
        "jks"
      ],
      "type": "string"
    },
    "target_kind": {
      "enum": [
        "pem",
        "p12",
        "jks"
      ],
      "type": "string"
    },
    "source_alias": {
      "type": "string",
      "description": "JKS 别名"
    },
    "target_alias": {
      "type": "string",
      "description": "目标别名，P12/PFX 默认 server，JKS 默认 tomcat"
    },
    "enable_aia_fill": {
      "type": "boolean",
      "description": "源不带链时尝试 AIA 拉取"
    },
    "source_password": {
      "type": "string"
    },
    "target_password": {
      "type": "string",
      "description": "P12/JKS 目标必填"
    },
    "source_blob_base64": {
      "type": "string",
      "description": "P12/JKS 源 base64"
    }
  }
}

csr.decode

Advertised by the server during the last successful anonymous check.

解析 CSR(PEM / base64-DER / 裸 DER):Subject、公钥算法、SAN、请求扩展、SPKI 指纹、自签名完整性校验。

csr.decode input schema

{
  "type": "object",
  "required": [
    "csr"
  ],
  "properties": {
    "csr": {
      "type": "string",
      "description": "CSR 内容:PEM 文本 / base64-DER / 裸 DER"
    }
  }
}

csr.generate

Advertised by the server during the last successful anonymous check.

生成 RSA / ECC 私钥与对应 CSR;入参为 Subject + 算法 + 哈希 + SAN。

csr.generate input schema

{
  "type": "object",
  "required": [
    "subject",
    "algorithm"
  ],
  "properties": {
    "subject": {
      "type": "object",
      "required": [
        "common_name",
        "country"
      ],
      "properties": {
        "san": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "额外的 Subject Alternative Names(可选;CN 已自动包含)"
        },
        "country": {
          "type": "string",
          "description": "C 国家代码 ISO 3166-1 alpha-2,会自动转大写(必填)"
        },
        "locality": {
          "type": "string",
          "description": "L 城市(可选)"
        },
        "province": {
          "type": "string",
          "description": "ST 省/州(可选)"
        },
        "common_name": {
          "type": "string",
          "description": "CN,支持中文域名及通配符，自动转换为 IDNA/Punycode。会自动作为第一个 SAN 加入(现代 CA 要求 CN 出现在 SAN 中)"
        },
        "organization": {
          "type": "string",
          "description": "O 组织名(可选,DV 证书通常不需要)"
        }
      }
    },
    "hash_alg": {
      "enum": [
        "SHA-256",
        "SHA-384",
        "SHA-512"
      ],
      "type": "string",
      "description": "RSA 适用;ECC 由曲线决定"
    },
    "algorithm": {
      "enum": [
        "RSA-2048",
        "RSA-3072",
        "RSA-4096",
        "EC-P256",
        "EC-P384",
        "EC-P521"
      ],
      "type": "string"
    }
  }
}

dcv.check

Advertised by the server during the last successful anonymous check.

DCV 预检 — DNS(TXT/CNAME)或 HTTP 文件验证模式。返回完整事件流(同步等待)。

dcv.check input schema

{
  "type": "object",
  "required": [
    "mode"
  ],
  "properties": {
    "mode": {
      "enum": [
        "dns",
        "http"
      ],
      "type": "string"
    },
    "domain": {
      "type": "string",
      "description": "DNS 模式必填:主机记录名"
    },
    "file_url": {
      "type": "string",
      "description": "HTTP 模式必填;协议头可省略,系统自动探测 http+https"
    },
    "target_ca": {
      "type": "string",
      "description": "可选;letsencrypt | digicert | sectigo | godaddy | globalsign | zerossl"
    },
    "record_type": {
      "enum": [
        "txt",
        "cname"
      ],
      "type": "string",
      "description": "DNS 模式记录类型,默认 txt"
    },
    "expected_token": {
      "type": "string",
      "description": "可选;粘贴期望值启用字节级匹配"
    }
  }
}

dcv.list_cas

Advertised by the server during the last successful anonymous check.

列出已支持的 CA(用于挑战路径推导与 CAA 比对)。

dcv.list_cas input schema

{
  "type": "object",
  "properties": {}
}

inspect.run

Advertised by the server during the last successful anonymous check.

HTTPS 体检：常规 TLS 与国密 TLCP、RSA/SM2 证书、RSA 根信任、整链 OCSP/CRL（含交叉证书）、协议套件及评级。同步等待全部完成。

inspect.run input schema

{
  "type": "object",
  "required": [
    "host"
  ],
  "properties": {
    "host": {
      "type": "string",
      "description": "FQDN,可带 :port"
    },
    "port": {
      "type": "integer",
      "description": "可选;默认从 host 解析或回退 443"
    },
    "force": {
      "type": "boolean",
      "description": "true 跳过缓存,强制重扫"
    }
  }
}

Prompts

Not advertised

No prompt definitions available.

Resources

Not advertised

No resource definitions available.

30-day availability

Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.

Successful checks: 1 of 1 (100%)
Average latency: 1996 ms
95th percentile latency: 1996 ms

Maintenance history

Public check and source-refresh events. Editorial and ownership records remain private.

Nov 1, 2026, 9:01 AM UTC · probe · passed · 1996 ms · metadata changed · 8 tool(s)

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers the remote server. Use --scope project to write .mcp.json for the repo.

Claude Code configuration

claude mcp add --transport http idigitrust-ssl-toolkit-mcp https://tools.idigitrust.com/api/v1/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).

Codex configuration

codex mcp add idigitrust-ssl-toolkit-mcp --url https://tools.idigitrust.com/api/v1/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable idigitrust-ssl-toolkit-mcp in your MCP settings.

Cursor configuration

{
  "mcpServers": {
    "idigitrust-ssl-toolkit-mcp": {
      "url": "https://tools.idigitrust.com/api/v1/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure).

Cline configuration

{
  "mcpServers": {
    "idigitrust-ssl-toolkit-mcp": {
      "type": "streamableHttp",
      "url": "https://tools.idigitrust.com/api/v1/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start idigitrust-ssl-toolkit-mcp and inspect its tools.

VS Code configuration

{
  "servers": {
    "idigitrust-ssl-toolkit-mcp": {
      "type": "http",
      "url": "https://tools.idigitrust.com/api/v1/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.

Gemini CLI configuration

gemini mcp add --transport http idigitrust-ssl-toolkit-mcp https://tools.idigitrust.com/api/v1/mcp

Claude Desktop

Merge this into claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\), then restart Claude Desktop.

Claude Desktop configuration

{
  "mcpServers": {
    "idigitrust-ssl-toolkit-mcp": {
      "url": "https://tools.idigitrust.com/api/v1/mcp"
    }
  }
}

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.

Windsurf configuration

{
  "mcpServers": {
    "idigitrust-ssl-toolkit-mcp": {
      "serverUrl": "https://tools.idigitrust.com/api/v1/mcp"
    }
  }
}

Let your agent find its tools

Find servers like IDigiTrust SSL Toolkit MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.

Connect Koskamo Explore workflows