MCP MeasureMCP Measure

índice observado

IDigiTrust SSL Toolkit

Free SSL/PKI tools: HTTPS audit incl. GM SM2/TLCP, DCV pre-check, CSR, cert decode, P12/JKS.

¿Debería usar esto?

Calidad y seguridad

B
Calidad de la descripción
61%
Integridad del esquema
88%
Calidad de los nombres
55%
Riesgo de envenenamiento
100%
Coincidencia de permisos
100%
Cumplimiento del protocolo
100%

Hallazgos (15)

  • LOWTool 'cert.decode' description lacks action verben cert.decode
  • LOWTool 'convert.run' description lacks action verben convert.run
  • LOWTool 'csr.decode' description lacks action verben csr.decode
  • LOWTool 'csr.generate' description lacks action verben csr.generate
  • LOWTool 'dcv.check' description lacks action verben dcv.check
  • LOWTool 'dcv.list_cas' description lacks action verben dcv.list_cas
  • LOWTool 'inspect.run' description lacks action verben inspect.run
  • LOWTool 'cert.decode' doesn't follow camelCase/snake_caseen cert.decode
  • LOWTool 'cert.match' doesn't follow camelCase/snake_caseen cert.match
  • LOWTool 'convert.run' doesn't follow camelCase/snake_caseen convert.run

Basado en el análisis automatizado de las definiciones de herramientas y el cumplimiento del protocolo.

Costo de contexto

~1,492Tokens (definiciones de herramientas)
~1.1 KBTamaño de respuesta típico
Impacto moderado en la atención (1.17% del contexto de 128k)

Este es el número aproximado de tokens que se consumen cada vez que las herramientas del servidor se cargan en el contexto de un modelo. Los recuentos más altos reducen la atención disponible para otras tareas.

Instalar

Instalación con un clic

Agrega esto a tu archivo `claude_desktop_config.json`:

{
  "mcpServers": {
    "ssl-toolkit-mcp": {
      "url": "https://tools.idigitrust.com/api/v1/mcp"
    }
  }
}

Puntos de conexión remotos

https://tools.idigitrust.com/api/v1/mcpstreamable-http

Qué puede hacer

Inventario de herramientas

Herramientas (8)

🟢 Solo lectura🟡 Escritura🔴 Eliminación⚪ Desconocido
⚪cert.decode(cert, chain, check_revocation)

解析证书(PEM / base64-DER / 裸 DER):全字段展开 + 整链吊销检查(OCSP / CRL，含交叉证书)+ 上传链时验证匹配关系并识别根证书。

Esquema de entrada

{
  "type": "object",
  "properties": {
    "cert": {
      "type": "string",
      "description": "证书内容:PEM(可为多证书 bundle)/ base64-DER / 裸 DER"
    },
    "chain": {
      "type": "string",
      "description": "可选;补充证书链(leaf 与链分文件时)。PEM / base64-DER / 裸 DER"
    },
    "check_revocation": {
      "type": "boolean",
      "description": "是否执行整链吊销检查(OCSP / CRL，含交叉证书),默认 true"
    }
  },
  "required": [
    "cert"
  ]
}
⚪cert.match(mode, cert, key, csr, password)

证书 / 私钥 / CSR 匹配验证(SubjectPublicKeyInfo SHA-256 指纹比对)。

Esquema de entrada

{
  "type": "object",
  "properties": {
    "mode": {
      "type": "string",
      "enum": [
        "cert-key",
        "cert-csr",
        "key-csr"
      ]
    },
    "cert": {
      "type": "string",
      "description": "证书 PEM"
    },
    "key": {
      "type": "string",
      "description": "私钥 PEM"
    },
    "csr": {
      "type": "string",
      "description": "CSR PEM"
    },
    "password": {
      "type": "string",
      "description": "加密私钥的密码(可选)"
    }
  },
  "required": [
    "mode"
  ]
}
⚪convert.run(source_kind, target_kind, cert_pem, key_pem, chain_pem, ...)

证书 / 密钥格式转换:PEM / P12 / JKS 任意方向(含同格式重置密码)。

Esquema de entrada

{
  "type": "object",
  "properties": {
    "source_kind": {
      "type": "string",
      "enum": [
        "pem",
        "p12",
        "jks"
      ]
    },
    "target_kind": {
      "type": "string",
      "enum": [
        "pem",
        "p12",
        "jks"
      ]
    },
    "cert_pem": {
      "type": "string",
      "description": "PEM 源:证书"
    },
    "key_pem": {
      "type": "string",
      "description": "PEM 源:私钥"
    },
    "chain_pem": {
      "type": "string",
      "description": "PEM 源:链(可选)"
    },
    "source_blob_base64": {
      "type": "string",
      "description": "P12/JKS 源 base64"
    },
    "source_password": {
      "type": "string"
    },
    "source_alias": {
      "type": "string",
      "description": "JKS 别名"
    },
    "target_password": {
      "type": "string",
      "description": "P12/JKS 目标必填"
    },
    "target_alias": {
      "type": "string",
      "description": "目标别名，P12/PFX 默认 server，JKS 默认 tomcat"
    },
    "enable_aia_fill": {
      "type": "boolean",
      "description": "源不带链时尝试 AIA 拉取"
    }
  },
  "required": [
    "source_kind",
    "target_kind"
  ]
}
⚪csr.decode(csr)

解析 CSR(PEM / base64-DER / 裸 DER):Subject、公钥算法、SAN、请求扩展、SPKI 指纹、自签名完整性校验。

Esquema de entrada

{
  "type": "object",
  "properties": {
    "csr": {
      "type": "string",
      "description": "CSR 内容:PEM 文本 / base64-DER / 裸 DER"
    }
  },
  "required": [
    "csr"
  ]
}
⚪csr.generate(subject, algorithm, hash_alg)

生成 RSA / ECC 私钥与对应 CSR;入参为 Subject + 算法 + 哈希 + SAN。

Esquema de entrada

{
  "type": "object",
  "properties": {
    "subject": {
      "type": "object",
      "required": [
        "common_name",
        "country"
      ],
      "properties": {
        "common_name": {
          "type": "string",
          "description": "CN,支持中文域名及通配符，自动转换为 IDNA/Punycode。会自动作为第一个 SAN 加入(现代 CA 要求 CN 出现在 SAN 中)"
        },
        "organization": {
          "type": "string",
          "description": "O 组织名(可选,DV 证书通常不需要)"
        },
        "country": {
          "type": "string",
          "description": "C 国家代码 ISO 3166-1 alpha-2,会自动转大写(必填)"
        },
        "province": {
          "type": "string",
          "description": "ST 省/州(可选)"
        },
        "locality": {
          "type": "string",
          "description": "L 城市(可选)"
        },
        "san": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "额外的 Subject Alternative Names(可选;CN 已自动包含)"
        }
      }
    },
    "algorithm": {
      "type": "string",
      "enum": [
        "RSA-2048",
        "RSA-3072",
        "RSA-4096",
        "EC-P256",
        "EC-P384",
        "EC-P521"
      ]
    },
    "hash_alg": {
      "type": "string",
      "enum": [
        "SHA-256",
        "SHA-384",
        "SHA-512"
      ],
      "description": "RSA 适用;ECC 由曲线决定"
    }
  },
  "required": [
    "subject",
    "algorithm"
  ]
}
⚪dcv.check(mode, domain, file_url, record_type, expected_token, ...)

DCV 预检 — DNS(TXT/CNAME)或 HTTP 文件验证模式。返回完整事件流(同步等待)。

Esquema de entrada

{
  "type": "object",
  "properties": {
    "mode": {
      "type": "string",
      "enum": [
        "dns",
        "http"
      ]
    },
    "domain": {
      "type": "string",
      "description": "DNS 模式必填:主机记录名"
    },
    "file_url": {
      "type": "string",
      "description": "HTTP 模式必填;协议头可省略,系统自动探测 http+https"
    },
    "record_type": {
      "type": "string",
      "enum": [
        "txt",
        "cname"
      ],
      "description": "DNS 模式记录类型,默认 txt"
    },
    "expected_token": {
      "type": "string",
      "description": "可选;粘贴期望值启用字节级匹配"
    },
    "target_ca": {
      "type": "string",
      "description": "可选;letsencrypt | digicert | sectigo | godaddy | globalsign | zerossl"
    }
  },
  "required": [
    "mode"
  ]
}
⚪dcv.list_cas

列出已支持的 CA(用于挑战路径推导与 CAA 比对)。

Esquema de entrada

{
  "type": "object",
  "properties": {}
}
⚪inspect.run(host, port, force)

HTTPS 体检：常规 TLS 与国密 TLCP、RSA/SM2 证书、RSA 根信任、整链 OCSP/CRL（含交叉证书）、协议套件及评级。同步等待全部完成。

Esquema de entrada

{
  "type": "object",
  "properties": {
    "host": {
      "type": "string",
      "description": "FQDN,可带 :port"
    },
    "port": {
      "type": "integer",
      "description": "可选;默认从 host 解析或回退 443"
    },
    "force": {
      "type": "boolean",
      "description": "true 跳过缓存,强制重扫"
    }
  },
  "required": [
    "host"
  ]
}

Comunidad

Califica este servidor

Evidencia

Observaciones recientes

verificadoversión no registrada8 herramientas