INDIVIDUAL MCP TOOL
watch_expiry
Subscribe an email address to free daily expiry monitoring of up to 5 domains (certificate, domain registration and security grade) with email alerts.
LIVE ENDPOINT
https://certdesk.dev/mcp
Connect to this endpoint to inspect the live schema for watch_expiry and invoke it with your own arguments.
Indexed input schema
{}Risk classification
Potential side effects detected · medium confidence · heuristic, not a guarantee.
- A tool name or description suggests sending messages.
Parent server
CONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.certdesk]
url = "https://certdesk.dev/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"certdesk": {
"type": "http",
"url": "https://certdesk.dev/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: certdesk
Remote MCP URL: https://certdesk.dev/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"certdesk": {
"url": "https://certdesk.dev/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"certdesk": {
"type": "http",
"url": "https://certdesk.dev/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "certdesk",
"transport": "streamable-http",
"url": "https://certdesk.dev/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
Related tools
check_certificate— Check one domain's TLS certificate in depth: expiry and days left for the certificate the server actually serves (measured from a Korean network, CT logs as fallback), whether a newer certificate exists in CT logs but is not deployed, live TLS verification from a global PoP and from Korea, certificate chain (leaf → intermediates → root), revocation, SAN list, and recent incident history of the issuing CA.check_expiry— Expiry summary for up to 5 domains at once: served certificate expiry and issuer, undeployed newer certificate in CT logs, domain registration expiry (RDAP), and alert lines (Korean).check_security— Security posture check of a web server (no port scanning): TLS protocol support (legacy 1.check_dns— DNS and hosting facts for a domain: nameservers with DNS provider, A/AAAA with IP owner (ASN), CNAME, MX, CAA (which CAs may issue), SPF/DMARC, DNSSEC, registrar and domain expiry (RDAP).check_dns_propagation— Compare answers for one DNS record across resolvers — the authoritative nameservers, Korean ISPs (KT, SK Broadband, LG U+) and public resolvers (Cloudflare, Google, Quad9, OpenDNS) — measured from a Korean network.explain_tls_error— Explain a TLS/SSL certificate error message from a browser, curl/OpenSSL, Java, Python, Node.