# SSL Certificate Check

A hosted MCP server that inspects SSL/TLS endpoints. It checks certificate expiration dates, covered hostnames, and accepted TLS versions directly inside your coding agent.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: powmcp
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/powmcp/mcp-server-guide
- Updated: 2026-09-22
- HTML: https://affpapa.org/en/nevibecode/mcp/ssl-certificate-check

## What it does

This server registers the `ssl_check` tool in your agent workflow. When invoked against an address, it retrieves the live certificate to inspect expiration timing, verify which domain names are covered, and see which TLS handshake versions the server permits.

PowMCP runs the service as a remote hosted endpoint over Streamable HTTP. You do not need to clone source files or run background Node or Python processes on your workstation. The backend implementation itself is proprietary, while descriptor files and setup documentation use the MIT license.

Because this connects via Streamable HTTP, your editor or CLI client must support remote HTTP MCP servers.

## Requirements
- Remote server: `https://powmcp.com/ssl-certificate-check/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http ssl-certificate-check https://powmcp.com/ssl-certificate-check/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add ssl-certificate-check --url https://powmcp.com/ssl-certificate-check/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "ssl-certificate-check": {
            "url": "https://powmcp.com/ssl-certificate-check/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "ssl-certificate-check": {
            "type": "http",
            "url": "https://powmcp.com/ssl-certificate-check/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http ssl-certificate-check https://powmcp.com/ssl-certificate-check/mcp
```

## When to use it
- inspect certificate expiration on a target endpoint
- check hostname coverage across domain certificates
- identify supported TLS versions for an external service
- audit endpoint encryption without terminal utilities

## Example prompts
- Check the TLS certificate on `api.example.com` and report when it expires.
- Use `ssl_check` to see if `auth.mycompany.org` allows TLS 1.3.
- Verify the hostname coverage for the certificate served by `portal.test`.

## Similar
- [ssl-certificate-management](https://affpapa.org/en/nevibecode/skills/ssl-certificate-management.md) — skill · 500 installs
- [ssl-tls-management](https://affpapa.org/en/nevibecode/skills/ssl-tls-management.md) — skill · 420 installs
- [TLS Radar](https://affpapa.org/en/nevibecode/mcp/tls-radar.md) — MCP server · ★ 3
- [dotnet-devcert-trust](https://affpapa.org/en/nevibecode/skills/dotnet-devcert-trust.md) — skill · 434 installs
- [active-directory-certificate-services](https://affpapa.org/en/nevibecode/skills/active-directory-certificate-services.md) — skill · 3600 installs
- [mtls-configuration](https://affpapa.org/en/nevibecode/skills/mtls-configuration.md) — skill · 10300 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md