Security & Testing

certscore.ai

Scans websites and provides security analysis and status.

3 endpoints16 known toolsFirst detected July 6, 2026Last detected September 6, 2026

ENDPOINT 1

https://mcp.certscore.ai/mcp/light

No auth detected

MCP server metadata

Name: certscore
Version: 0.2.16

Capabilities

tools.listChanged

Known tools 3

certscore_scan_site

Validate a public website URL and either reuse an eligible completed CertScore scan or create a new public-web scan for observable privacy and consent signals, including pre-consent storage, trackers, consent/CMP behavior, transport security, policy disclosures, and GDPR/ePrivacy or CCPA/CPRA review signals.

Potential side effects

certscore_get_scan_status

Poll an accepted scan using only the unchanged scanId returned by certscore_scan_site.

Inferred read-only

certscore_get_scan_bundle

Call after completed or completed_limited status.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.certscore]
url = "https://mcp.certscore.ai/mcp/light"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "certscore": {
      "type": "http",
      "url": "https://mcp.certscore.ai/mcp/light"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: certscore
Remote MCP URL: https://mcp.certscore.ai/mcp/light

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "certscore": {
      "url": "https://mcp.certscore.ai/mcp/light"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "certscore": {
      "type": "http",
      "url": "https://mcp.certscore.ai/mcp/light"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "certscore",
  "transport": "streamable-http",
  "url": "https://mcp.certscore.ai/mcp/light"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

ENDPOINT 2

https://mcp.certscore.ai/mcp

Auth required

Known tools 0

No tool metadata was available in the registry cache.

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.certscore-ai]
url = "https://mcp.certscore.ai/mcp"
enabled = true
bearer_token_env_var = "MCP_BEARER_TOKEN"

Authentication is required. Replace the placeholder locally and never commit a secret.

Claude Code

.mcp.json

{
  "mcpServers": {
    "certscore-ai": {
      "type": "http",
      "url": "https://mcp.certscore.ai/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_BEARER_TOKEN"
      }
    }
  }
}

Authentication is required. Replace the placeholder locally and never commit a secret.

Claude Desktop

Settings → Connectors → Add custom connector

Name: certscore-ai
Remote MCP URL: https://mcp.certscore.ai/mcp

Add the URL as a custom connector, then complete its supported authorization flow. Claude Desktop remote connectors are configured in the UI.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "certscore-ai": {
      "url": "https://mcp.certscore.ai/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_BEARER_TOKEN"
      }
    }
  }
}

Authentication is required. Replace the placeholder locally and never commit a secret.

Visual Studio Code

.vscode/mcp.json

{
  "servers": {
    "certscore-ai": {
      "type": "http",
      "url": "https://mcp.certscore.ai/mcp",
      "headers": {
        "Authorization": "Bearer ${input:mcp-token}"
      }
    }
  },
  "inputs": [
    {
      "type": "promptString",
      "id": "mcp-token",
      "description": "certscore-ai bearer token",
      "password": true
    }
  ]
}

Authentication is required. Replace the placeholder locally and never commit a secret.

Generic MCP

Client-specific MCP configuration

{
  "name": "certscore-ai",
  "transport": "streamable-http",
  "url": "https://mcp.certscore.ai/mcp",
  "headers": {
    "Authorization": "Bearer YOUR_BEARER_TOKEN"
  }
}

Authentication is required. Replace the placeholder locally and never commit a secret.

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

ENDPOINT 3

https://mcp.certscore.ai/mcp/anonymous

No auth detected

MCP server metadata

Name: certscore
Version: 0.2.15

Capabilities

tools.listChanged

Known tools 13

create_scan

Deprecated compatibility alias of scan_site.

Inferred read-only

scan_site

First call.

Inferred read-only

get_scan

Retrieve the API v2 public-safe scan resource, including completed-limited no-go disposition, reason-specific guidance, and timing when available.

Inferred read-only

get_scan_status

Poll with only the stable scanId returned by scan_site.

Inferred read-only

get_report

Retrieve a summary Pulse report, including customer-safe no-go messaging when coverage is completed-limited.

Inferred read-only

get_evidence

Retrieve the bounded structured Evidence JSON packet for a stable scan ID.

Inferred read-only

get_scan_bundle

Call after completed or completed_limited status.

Inferred read-only

export_findings

Return structured findings plus completed-limited no-go disposition and guidance for downstream review or ticketing workflows.

Inferred read-only

list_findings

List API v2 public-safe findings already projected for a scan.

Inferred read-only

get_pre_consent_cookies_trackers

Retrieve the public-safe Cookies & Trackers (Pre-consent) report table as compact JSON for a scan.

Inferred read-only

explain_finding

Explain one projected finding with public evidence, caveats, reviewer next steps, and reason-specific no-go context when applicable.

Inferred read-only

get_latest_domain_scan

Retrieve the latest eligible API v2 public-safe scan for a domain.

Inferred read-only

get_latest_domain_pre_consent_cookies_trackers

Retrieve the public-safe Cookies & Trackers (Pre-consent) table from the latest eligible scan for a domain.

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.certscore]
url = "https://mcp.certscore.ai/mcp/anonymous"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "certscore": {
      "type": "http",
      "url": "https://mcp.certscore.ai/mcp/anonymous"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: certscore
Remote MCP URL: https://mcp.certscore.ai/mcp/anonymous

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "certscore": {
      "url": "https://mcp.certscore.ai/mcp/anonymous"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "certscore": {
      "type": "http",
      "url": "https://mcp.certscore.ai/mcp/anonymous"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "certscore",
  "transport": "streamable-http",
  "url": "https://mcp.certscore.ai/mcp/anonymous"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for certscore.ai was fetched 2026-07-28T03:36:33.823Z and is being refreshed.

Trust status Neutral

certscore.ai is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.