IDigiTrust SSL Toolkit

Free SSL/PKI tools: HTTPS audit incl. GM SM2/TLCP, DCV pre-check, CSR, cert decode, P12/JKS.

Sollte ich dies verwenden

Qualität und Sicherheit

B
Qualität der Beschreibung
61%
Vollständigkeit des Schemas
88%
Qualität der Benennung
55%
Risiko der Vergiftung
100%
Übereinstimmung der Berechtigungen
100%
Einhaltung des Protokolls
100%

Befunde (15)

  • LOWTool 'cert.decode' description lacks action verbin cert.decode
  • LOWTool 'convert.run' description lacks action verbin convert.run
  • LOWTool 'csr.decode' description lacks action verbin csr.decode
  • LOWTool 'csr.generate' description lacks action verbin csr.generate
  • LOWTool 'dcv.check' description lacks action verbin dcv.check
  • LOWTool 'dcv.list_cas' description lacks action verbin dcv.list_cas
  • LOWTool 'inspect.run' description lacks action verbin inspect.run
  • LOWTool 'cert.decode' doesn't follow camelCase/snake_casein cert.decode
  • LOWTool 'cert.match' doesn't follow camelCase/snake_casein cert.match
  • LOWTool 'convert.run' doesn't follow camelCase/snake_casein convert.run

Basierend auf einer automatisierten Analyse der Tool-Definitionen und der Einhaltung des Protokolls.

Kontextkosten

~1,492Tokens (Tool-Definitionen)
~1.1 KBTypische Antwortgröße
Mittlere Auswirkung auf die Aufmerksamkeit (1.17% von 128k Kontext)

Dies ist die ungefähre Anzahl der Tokens, die jedes Mal verbraucht werden, wenn die Tools des Servers in den Kontext eines Modells geladen werden. Höhere Werte verringern die Aufmerksamkeit, die für andere Aufgaben verfügbar ist.

Installieren

Installation mit einem Klick

Fügen Sie dies Ihrer Datei `claude_desktop_config.json` hinzu:

{
  "mcpServers": {
    "ssl-toolkit-mcp": {
      "url": "https://tools.idigitrust.com/api/v1/mcp"
    }
  }
}

Remote-Endpunkte

https://tools.idigitrust.com/api/v1/mcpstreamable-http

Was es kann

Tool-Inventar

Tools (8)

🟢 Nur lesen🟡 Schreiben🔴 Löschen⚪ Unbekannt
⚪cert.decode(cert, chain, check_revocation)

解析证书(PEM / base64-DER / 裸 DER):全字段展开 + 整链吊销检查(OCSP / CRL,含交叉证书)+ 上传链时验证匹配关系并识别根证书。

Eingabe-Schema

{
  "type": "object",
  "properties": {
    "cert": {
      "type": "string",
      "description": "证书内容:PEM(可为多证书 bundle)/ base64-DER / 裸 DER"
    },
    "chain": {
      "type": "string",
      "description": "可选;补充证书链(leaf 与链分文件时)。PEM / base64-DER / 裸 DER"
    },
    "check_revocation": {
      "type": "boolean",
      "description": "是否执行整链吊销检查(OCSP / CRL,含交叉证书),默认 true"
    }
  },
  "required": [
    "cert"
  ]
}
⚪cert.match(mode, cert, key, csr, password)

证书 / 私钥 / CSR 匹配验证(SubjectPublicKeyInfo SHA-256 指纹比对)。

Eingabe-Schema

{
  "type": "object",
  "properties": {
    "mode": {
      "type": "string",
      "enum": [
        "cert-key",
        "cert-csr",
        "key-csr"
      ]
    },
    "cert": {
      "type": "string",
      "description": "证书 PEM"
    },
    "key": {
      "type": "string",
      "description": "私钥 PEM"
    },
    "csr": {
      "type": "string",
      "description": "CSR PEM"
    },
    "password": {
      "type": "string",
      "description": "加密私钥的密码(可选)"
    }
  },
  "required": [
    "mode"
  ]
}
⚪convert.run(source_kind, target_kind, cert_pem, key_pem, chain_pem, ...)

证书 / 密钥格式转换:PEM / P12 / JKS 任意方向(含同格式重置密码)。

Eingabe-Schema

{
  "type": "object",
  "properties": {
    "source_kind": {
      "type": "string",
      "enum": [
        "pem",
        "p12",
        "jks"
      ]
    },
    "target_kind": {
      "type": "string",
      "enum": [
        "pem",
        "p12",
        "jks"
      ]
    },
    "cert_pem": {
      "type": "string",
      "description": "PEM 源:证书"
    },
    "key_pem": {
      "type": "string",
      "description": "PEM 源:私钥"
    },
    "chain_pem": {
      "type": "string",
      "description": "PEM 源:链(可选)"
    },
    "source_blob_base64": {
      "type": "string",
      "description": "P12/JKS 源 base64"
    },
    "source_password": {
      "type": "string"
    },
    "source_alias": {
      "type": "string",
      "description": "JKS 别名"
    },
    "target_password": {
      "type": "string",
      "description": "P12/JKS 目标必填"
    },
    "target_alias": {
      "type": "string",
      "description": "目标别名,P12/PFX 默认 server,JKS 默认 tomcat"
    },
    "enable_aia_fill": {
      "type": "boolean",
      "description": "源不带链时尝试 AIA 拉取"
    }
  },
  "required": [
    "source_kind",
    "target_kind"
  ]
}
⚪csr.decode(csr)

解析 CSR(PEM / base64-DER / 裸 DER):Subject、公钥算法、SAN、请求扩展、SPKI 指纹、自签名完整性校验。

Eingabe-Schema

{
  "type": "object",
  "properties": {
    "csr": {
      "type": "string",
      "description": "CSR 内容:PEM 文本 / base64-DER / 裸 DER"
    }
  },
  "required": [
    "csr"
  ]
}
⚪csr.generate(subject, algorithm, hash_alg)

生成 RSA / ECC 私钥与对应 CSR;入参为 Subject + 算法 + 哈希 + SAN。

Eingabe-Schema

{
  "type": "object",
  "properties": {
    "subject": {
      "type": "object",
      "required": [
        "common_name",
        "country"
      ],
      "properties": {
        "common_name": {
          "type": "string",
          "description": "CN,支持中文域名及通配符,自动转换为 IDNA/Punycode。会自动作为第一个 SAN 加入(现代 CA 要求 CN 出现在 SAN 中)"
        },
        "organization": {
          "type": "string",
          "description": "O 组织名(可选,DV 证书通常不需要)"
        },
        "country": {
          "type": "string",
          "description": "C 国家代码 ISO 3166-1 alpha-2,会自动转大写(必填)"
        },
        "province": {
          "type": "string",
          "description": "ST 省/州(可选)"
        },
        "locality": {
          "type": "string",
          "description": "L 城市(可选)"
        },
        "san": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "额外的 Subject Alternative Names(可选;CN 已自动包含)"
        }
      }
    },
    "algorithm": {
      "type": "string",
      "enum": [
        "RSA-2048",
        "RSA-3072",
        "RSA-4096",
        "EC-P256",
        "EC-P384",
        "EC-P521"
      ]
    },
    "hash_alg": {
      "type": "string",
      "enum": [
        "SHA-256",
        "SHA-384",
        "SHA-512"
      ],
      "description": "RSA 适用;ECC 由曲线决定"
    }
  },
  "required": [
    "subject",
    "algorithm"
  ]
}
⚪dcv.check(mode, domain, file_url, record_type, expected_token, ...)

DCV 预检 — DNS(TXT/CNAME)或 HTTP 文件验证模式。返回完整事件流(同步等待)。

Eingabe-Schema

{
  "type": "object",
  "properties": {
    "mode": {
      "type": "string",
      "enum": [
        "dns",
        "http"
      ]
    },
    "domain": {
      "type": "string",
      "description": "DNS 模式必填:主机记录名"
    },
    "file_url": {
      "type": "string",
      "description": "HTTP 模式必填;协议头可省略,系统自动探测 http+https"
    },
    "record_type": {
      "type": "string",
      "enum": [
        "txt",
        "cname"
      ],
      "description": "DNS 模式记录类型,默认 txt"
    },
    "expected_token": {
      "type": "string",
      "description": "可选;粘贴期望值启用字节级匹配"
    },
    "target_ca": {
      "type": "string",
      "description": "可选;letsencrypt | digicert | sectigo | godaddy | globalsign | zerossl"
    }
  },
  "required": [
    "mode"
  ]
}
⚪dcv.list_cas

列出已支持的 CA(用于挑战路径推导与 CAA 比对)。

Eingabe-Schema

{
  "type": "object",
  "properties": {}
}
⚪inspect.run(host, port, force)

HTTPS 体检:常规 TLS 与国密 TLCP、RSA/SM2 证书、RSA 根信任、整链 OCSP/CRL(含交叉证书)、协议套件及评级。同步等待全部完成。

Eingabe-Schema

{
  "type": "object",
  "properties": {
    "host": {
      "type": "string",
      "description": "FQDN,可带 :port"
    },
    "port": {
      "type": "integer",
      "description": "可选;默认从 host 解析或回退 443"
    },
    "force": {
      "type": "boolean",
      "description": "true 跳过缓存,强制重扫"
    }
  },
  "required": [
    "host"
  ]
}

Community

Diesen Server bewerten

Nachweis

Aktuelle Beobachtungen

verifiziertVersion nicht aufgezeichnet8 Tools