Security & Testing

certdesk.dev

Checks TLS certificates, expiry, security posture, DNS records, and DNS propagation for domains.

1 endpoint7 known toolsFirst detected September 27, 2026Last detected September 27, 2026

ENDPOINT 1

https://certdesk.dev/mcp

No auth detected

MCP server metadata

Name: certdesk
Version: 0.3.0

Capabilities

tools

Server instructions

certdesk: TLS/SSL certificate diagnostics. check_certificate = one domain in depth; check_expiry = up to 5 domains; check_security = server hardening grade; check_dns = nameservers, DNS provider, IP owner, CAA, SPF/DMARC, DNSSEC, registrar; check_dns_propagation = compare a record across Korean ISPs, public resolvers and authoritative servers (for TXT/CNAME domain validation); explain_tls_error = what an error message means and how to fix it; watch_expiry = free email alerts (double opt-in, only with the user's own address). Guides are Korean: https://certdesk.dev/ko/guide/

Known tools 7

check_certificate

Check one domain's TLS certificate in depth: expiry and days left for the certificate the server actually serves (measured from a Korean network, CT logs as fallback), whether a newer certificate exists in CT logs but is not deployed, live TLS verification from a global PoP and from Korea, certificate chain (leaf → intermediates → root), revocation, SAN list, and recent incident history of the issuing CA.

Inferred read-only

check_expiry

Expiry summary for up to 5 domains at once: served certificate expiry and issuer, undeployed newer certificate in CT logs, domain registration expiry (RDAP), and alert lines (Korean).

Inferred read-only

check_security

Security posture check of a web server (no port scanning): TLS protocol support (legacy 1.

Inferred read-only

check_dns

DNS and hosting facts for a domain: nameservers with DNS provider, A/AAAA with IP owner (ASN), CNAME, MX, CAA (which CAs may issue), SPF/DMARC, DNSSEC, registrar and domain expiry (RDAP).

Inferred read-only

check_dns_propagation

Compare answers for one DNS record across resolvers — the authoritative nameservers, Korean ISPs (KT, SK Broadband, LG U+) and public resolvers (Cloudflare, Google, Quad9, OpenDNS) — measured from a Korean network.

Inferred read-only

explain_tls_error

Explain a TLS/SSL certificate error message from a browser, curl/OpenSSL, Java, Python, Node.

Potential side effects

watch_expiry

Subscribe an email address to free daily expiry monitoring of up to 5 domains (certificate, domain registration and security grade) with email alerts.

Potential side effects

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.certdesk]
url = "https://certdesk.dev/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "certdesk": {
      "type": "http",
      "url": "https://certdesk.dev/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: certdesk
Remote MCP URL: https://certdesk.dev/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "certdesk": {
      "url": "https://certdesk.dev/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "certdesk": {
      "type": "http",
      "url": "https://certdesk.dev/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "certdesk",
  "transport": "streamable-http",
  "url": "https://certdesk.dev/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for certdesk.dev was fetched 2026-09-30T07:00:35.827Z.

Trust status Neutral

certdesk.dev is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.