MCP MeasureMCP Measure

索引已觀測

IDigiTrust SSL Toolkit

Free SSL/PKI tools: HTTPS audit incl. GM SM2/TLCP, DCV pre-check, CSR, cert decode, P12/JKS.

我該用這個嗎

品質與安全性

B
說明品質
61%
結構描述完整度
88%
命名品質
55%
汙染風險
100%
權限相符程度
100%
協定合規性
100%

發現項目（15）

  • LOWTool 'cert.decode' description lacks action verb在 cert.decode 中
  • LOWTool 'convert.run' description lacks action verb在 convert.run 中
  • LOWTool 'csr.decode' description lacks action verb在 csr.decode 中
  • LOWTool 'csr.generate' description lacks action verb在 csr.generate 中
  • LOWTool 'dcv.check' description lacks action verb在 dcv.check 中
  • LOWTool 'dcv.list_cas' description lacks action verb在 dcv.list_cas 中
  • LOWTool 'inspect.run' description lacks action verb在 inspect.run 中
  • LOWTool 'cert.decode' doesn't follow camelCase/snake_case在 cert.decode 中
  • LOWTool 'cert.match' doesn't follow camelCase/snake_case在 cert.match 中
  • LOWTool 'convert.run' doesn't follow camelCase/snake_case在 convert.run 中

根據工具定義與協定合規性的自動化分析。

上下文成本

~1,492Token（工具定義）
~1.1 KB典型回應大小
中等的注意力影響（128k 上下文的 1.17%）

這是每次將伺服器的工具載入模型上下文時所消耗的約略 token 數量。數量越高，可用於其他工作的注意力就越少。

安裝

一鍵安裝

將以下內容加入你的 `claude_desktop_config.json` 檔案：

{
  "mcpServers": {
    "ssl-toolkit-mcp": {
      "url": "https://tools.idigitrust.com/api/v1/mcp"
    }
  }
}

遠端端點

https://tools.idigitrust.com/api/v1/mcpstreamable-http

它能做什麼

工具清單

工具（8）

🟢 唯讀🟡 寫入🔴 刪除⚪ 未知
⚪cert.decode(cert, chain, check_revocation)

解析证书(PEM / base64-DER / 裸 DER):全字段展开 + 整链吊销检查(OCSP / CRL，含交叉证书)+ 上传链时验证匹配关系并识别根证书。

輸入結構描述

{
  "type": "object",
  "properties": {
    "cert": {
      "type": "string",
      "description": "证书内容:PEM(可为多证书 bundle)/ base64-DER / 裸 DER"
    },
    "chain": {
      "type": "string",
      "description": "可选;补充证书链(leaf 与链分文件时)。PEM / base64-DER / 裸 DER"
    },
    "check_revocation": {
      "type": "boolean",
      "description": "是否执行整链吊销检查(OCSP / CRL，含交叉证书),默认 true"
    }
  },
  "required": [
    "cert"
  ]
}
⚪cert.match(mode, cert, key, csr, password)

证书 / 私钥 / CSR 匹配验证(SubjectPublicKeyInfo SHA-256 指纹比对)。

輸入結構描述

{
  "type": "object",
  "properties": {
    "mode": {
      "type": "string",
      "enum": [
        "cert-key",
        "cert-csr",
        "key-csr"
      ]
    },
    "cert": {
      "type": "string",
      "description": "证书 PEM"
    },
    "key": {
      "type": "string",
      "description": "私钥 PEM"
    },
    "csr": {
      "type": "string",
      "description": "CSR PEM"
    },
    "password": {
      "type": "string",
      "description": "加密私钥的密码(可选)"
    }
  },
  "required": [
    "mode"
  ]
}
⚪convert.run(source_kind, target_kind, cert_pem, key_pem, chain_pem, ...)

证书 / 密钥格式转换:PEM / P12 / JKS 任意方向(含同格式重置密码)。

輸入結構描述

{
  "type": "object",
  "properties": {
    "source_kind": {
      "type": "string",
      "enum": [
        "pem",
        "p12",
        "jks"
      ]
    },
    "target_kind": {
      "type": "string",
      "enum": [
        "pem",
        "p12",
        "jks"
      ]
    },
    "cert_pem": {
      "type": "string",
      "description": "PEM 源:证书"
    },
    "key_pem": {
      "type": "string",
      "description": "PEM 源:私钥"
    },
    "chain_pem": {
      "type": "string",
      "description": "PEM 源:链(可选)"
    },
    "source_blob_base64": {
      "type": "string",
      "description": "P12/JKS 源 base64"
    },
    "source_password": {
      "type": "string"
    },
    "source_alias": {
      "type": "string",
      "description": "JKS 别名"
    },
    "target_password": {
      "type": "string",
      "description": "P12/JKS 目标必填"
    },
    "target_alias": {
      "type": "string",
      "description": "目标别名，P12/PFX 默认 server，JKS 默认 tomcat"
    },
    "enable_aia_fill": {
      "type": "boolean",
      "description": "源不带链时尝试 AIA 拉取"
    }
  },
  "required": [
    "source_kind",
    "target_kind"
  ]
}
⚪csr.decode(csr)

解析 CSR(PEM / base64-DER / 裸 DER):Subject、公钥算法、SAN、请求扩展、SPKI 指纹、自签名完整性校验。

輸入結構描述

{
  "type": "object",
  "properties": {
    "csr": {
      "type": "string",
      "description": "CSR 内容:PEM 文本 / base64-DER / 裸 DER"
    }
  },
  "required": [
    "csr"
  ]
}
⚪csr.generate(subject, algorithm, hash_alg)

生成 RSA / ECC 私钥与对应 CSR;入参为 Subject + 算法 + 哈希 + SAN。

輸入結構描述

{
  "type": "object",
  "properties": {
    "subject": {
      "type": "object",
      "required": [
        "common_name",
        "country"
      ],
      "properties": {
        "common_name": {
          "type": "string",
          "description": "CN,支持中文域名及通配符，自动转换为 IDNA/Punycode。会自动作为第一个 SAN 加入(现代 CA 要求 CN 出现在 SAN 中)"
        },
        "organization": {
          "type": "string",
          "description": "O 组织名(可选,DV 证书通常不需要)"
        },
        "country": {
          "type": "string",
          "description": "C 国家代码 ISO 3166-1 alpha-2,会自动转大写(必填)"
        },
        "province": {
          "type": "string",
          "description": "ST 省/州(可选)"
        },
        "locality": {
          "type": "string",
          "description": "L 城市(可选)"
        },
        "san": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "额外的 Subject Alternative Names(可选;CN 已自动包含)"
        }
      }
    },
    "algorithm": {
      "type": "string",
      "enum": [
        "RSA-2048",
        "RSA-3072",
        "RSA-4096",
        "EC-P256",
        "EC-P384",
        "EC-P521"
      ]
    },
    "hash_alg": {
      "type": "string",
      "enum": [
        "SHA-256",
        "SHA-384",
        "SHA-512"
      ],
      "description": "RSA 适用;ECC 由曲线决定"
    }
  },
  "required": [
    "subject",
    "algorithm"
  ]
}
⚪dcv.check(mode, domain, file_url, record_type, expected_token, ...)

DCV 预检 — DNS(TXT/CNAME)或 HTTP 文件验证模式。返回完整事件流(同步等待)。

輸入結構描述

{
  "type": "object",
  "properties": {
    "mode": {
      "type": "string",
      "enum": [
        "dns",
        "http"
      ]
    },
    "domain": {
      "type": "string",
      "description": "DNS 模式必填:主机记录名"
    },
    "file_url": {
      "type": "string",
      "description": "HTTP 模式必填;协议头可省略,系统自动探测 http+https"
    },
    "record_type": {
      "type": "string",
      "enum": [
        "txt",
        "cname"
      ],
      "description": "DNS 模式记录类型,默认 txt"
    },
    "expected_token": {
      "type": "string",
      "description": "可选;粘贴期望值启用字节级匹配"
    },
    "target_ca": {
      "type": "string",
      "description": "可选;letsencrypt | digicert | sectigo | godaddy | globalsign | zerossl"
    }
  },
  "required": [
    "mode"
  ]
}
⚪dcv.list_cas

列出已支持的 CA(用于挑战路径推导与 CAA 比对)。

輸入結構描述

{
  "type": "object",
  "properties": {}
}
⚪inspect.run(host, port, force)

HTTPS 体检：常规 TLS 与国密 TLCP、RSA/SM2 证书、RSA 根信任、整链 OCSP/CRL（含交叉证书）、协议套件及评级。同步等待全部完成。

輸入結構描述

{
  "type": "object",
  "properties": {
    "host": {
      "type": "string",
      "description": "FQDN,可带 :port"
    },
    "port": {
      "type": "integer",
      "description": "可选;默认从 host 解析或回退 443"
    },
    "force": {
      "type": "boolean",
      "description": "true 跳过缓存,强制重扫"
    }
  },
  "required": [
    "host"
  ]
}

社群

為此伺服器評分

證據

近期觀測

已驗證未記錄版本8 個工具