IDigiTrust SSL Toolkit
Free SSL/PKI tools: HTTPS audit incl. GM SM2/TLCP, DCV pre-check, CSR, cert decode, P12/JKS.
Should I use this
Quality & Safety
B
Findings (15)
- LOWTool 'cert.decode' description lacks action verbin cert.decode
- LOWTool 'convert.run' description lacks action verbin convert.run
- LOWTool 'csr.decode' description lacks action verbin csr.decode
- LOWTool 'csr.generate' description lacks action verbin csr.generate
- LOWTool 'dcv.check' description lacks action verbin dcv.check
- LOWTool 'dcv.list_cas' description lacks action verbin dcv.list_cas
- LOWTool 'inspect.run' description lacks action verbin inspect.run
- LOWTool 'cert.decode' doesn't follow camelCase/snake_casein cert.decode
- LOWTool 'cert.match' doesn't follow camelCase/snake_casein cert.match
- LOWTool 'convert.run' doesn't follow camelCase/snake_casein convert.run
Based on automated analysis of tool definitions and protocol compliance.
Context Cost
~1,492Tokens (tool definitions)
~1.1 KBTypical response size
Moderate attention impact (1.17% of 128k context)
This is the approximate number of tokens consumed each time the server's tools are loaded into a model's context. Higher counts reduce the attention available for other tasks.
Install
One-Click Install
Add this to your `claude_desktop_config.json` file:
{
"mcpServers": {
"ssl-toolkit-mcp": {
"url": "https://tools.idigitrust.com/api/v1/mcp"
}
}
}Remote endpoints
https://tools.idigitrust.com/api/v1/mcpstreamable-httpWhat it can do
Tool inventory
Tools (8)
🟢 Read-only🟡 Write🔴 Delete⚪ Unknown
⚪cert.decode(cert, chain, check_revocation)
解析证书(PEM / base64-DER / 裸 DER):全字段展开 + 整链吊销检查(OCSP / CRL，含交叉证书)+ 上传链时验证匹配关系并识别根证书。
Input Schema
{
"type": "object",
"properties": {
"cert": {
"type": "string",
"description": "证书内容:PEM(可为多证书 bundle)/ base64-DER / 裸 DER"
},
"chain": {
"type": "string",
"description": "可选;补充证书链(leaf 与链分文件时)。PEM / base64-DER / 裸 DER"
},
"check_revocation": {
"type": "boolean",
"description": "是否执行整链吊销检查(OCSP / CRL，含交叉证书),默认 true"
}
},
"required": [
"cert"
]
}⚪cert.match(mode, cert, key, csr, password)
证书 / 私钥 / CSR 匹配验证(SubjectPublicKeyInfo SHA-256 指纹比对)。
Input Schema
{
"type": "object",
"properties": {
"mode": {
"type": "string",
"enum": [
"cert-key",
"cert-csr",
"key-csr"
]
},
"cert": {
"type": "string",
"description": "证书 PEM"
},
"key": {
"type": "string",
"description": "私钥 PEM"
},
"csr": {
"type": "string",
"description": "CSR PEM"
},
"password": {
"type": "string",
"description": "加密私钥的密码(可选)"
}
},
"required": [
"mode"
]
}⚪convert.run(source_kind, target_kind, cert_pem, key_pem, chain_pem, ...)
证书 / 密钥格式转换:PEM / P12 / JKS 任意方向(含同格式重置密码)。
Input Schema
{
"type": "object",
"properties": {
"source_kind": {
"type": "string",
"enum": [
"pem",
"p12",
"jks"
]
},
"target_kind": {
"type": "string",
"enum": [
"pem",
"p12",
"jks"
]
},
"cert_pem": {
"type": "string",
"description": "PEM 源:证书"
},
"key_pem": {
"type": "string",
"description": "PEM 源:私钥"
},
"chain_pem": {
"type": "string",
"description": "PEM 源:链(可选)"
},
"source_blob_base64": {
"type": "string",
"description": "P12/JKS 源 base64"
},
"source_password": {
"type": "string"
},
"source_alias": {
"type": "string",
"description": "JKS 别名"
},
"target_password": {
"type": "string",
"description": "P12/JKS 目标必填"
},
"target_alias": {
"type": "string",
"description": "目标别名，P12/PFX 默认 server，JKS 默认 tomcat"
},
"enable_aia_fill": {
"type": "boolean",
"description": "源不带链时尝试 AIA 拉取"
}
},
"required": [
"source_kind",
"target_kind"
]
}⚪csr.decode(csr)
解析 CSR(PEM / base64-DER / 裸 DER):Subject、公钥算法、SAN、请求扩展、SPKI 指纹、自签名完整性校验。
Input Schema
{
"type": "object",
"properties": {
"csr": {
"type": "string",
"description": "CSR 内容:PEM 文本 / base64-DER / 裸 DER"
}
},
"required": [
"csr"
]
}⚪csr.generate(subject, algorithm, hash_alg)
生成 RSA / ECC 私钥与对应 CSR;入参为 Subject + 算法 + 哈希 + SAN。
Input Schema
{
"type": "object",
"properties": {
"subject": {
"type": "object",
"required": [
"common_name",
"country"
],
"properties": {
"common_name": {
"type": "string",
"description": "CN,支持中文域名及通配符，自动转换为 IDNA/Punycode。会自动作为第一个 SAN 加入(现代 CA 要求 CN 出现在 SAN 中)"
},
"organization": {
"type": "string",
"description": "O 组织名(可选,DV 证书通常不需要)"
},
"country": {
"type": "string",
"description": "C 国家代码 ISO 3166-1 alpha-2,会自动转大写(必填)"
},
"province": {
"type": "string",
"description": "ST 省/州(可选)"
},
"locality": {
"type": "string",
"description": "L 城市(可选)"
},
"san": {
"type": "array",
"items": {
"type": "string"
},
"description": "额外的 Subject Alternative Names(可选;CN 已自动包含)"
}
}
},
"algorithm": {
"type": "string",
"enum": [
"RSA-2048",
"RSA-3072",
"RSA-4096",
"EC-P256",
"EC-P384",
"EC-P521"
]
},
"hash_alg": {
"type": "string",
"enum": [
"SHA-256",
"SHA-384",
"SHA-512"
],
"description": "RSA 适用;ECC 由曲线决定"
}
},
"required": [
"subject",
"algorithm"
]
}⚪dcv.check(mode, domain, file_url, record_type, expected_token, ...)
DCV 预检 — DNS(TXT/CNAME)或 HTTP 文件验证模式。返回完整事件流(同步等待)。
Input Schema
{
"type": "object",
"properties": {
"mode": {
"type": "string",
"enum": [
"dns",
"http"
]
},
"domain": {
"type": "string",
"description": "DNS 模式必填:主机记录名"
},
"file_url": {
"type": "string",
"description": "HTTP 模式必填;协议头可省略,系统自动探测 http+https"
},
"record_type": {
"type": "string",
"enum": [
"txt",
"cname"
],
"description": "DNS 模式记录类型,默认 txt"
},
"expected_token": {
"type": "string",
"description": "可选;粘贴期望值启用字节级匹配"
},
"target_ca": {
"type": "string",
"description": "可选;letsencrypt | digicert | sectigo | godaddy | globalsign | zerossl"
}
},
"required": [
"mode"
]
}⚪dcv.list_cas
列出已支持的 CA(用于挑战路径推导与 CAA 比对)。
Input Schema
{
"type": "object",
"properties": {}
}⚪inspect.run(host, port, force)
HTTPS 体检：常规 TLS 与国密 TLCP、RSA/SM2 证书、RSA 根信任、整链 OCSP/CRL（含交叉证书）、协议套件及评级。同步等待全部完成。
Input Schema
{
"type": "object",
"properties": {
"host": {
"type": "string",
"description": "FQDN,可带 :port"
},
"port": {
"type": "integer",
"description": "可选;默认从 host 解析或回退 443"
},
"force": {
"type": "boolean",
"description": "true 跳过缓存,强制重扫"
}
},
"required": [
"host"
]
}Community
Evidence
Recent observations
verifiedversion not recorded8 tools