CertIndex MCP

- Search certificates by domain or issuer— Find TLS certificates matching a domain, CN, issuer, or SAN pattern usingsearch_certificates.
- Retrieve a certificate by fingerprint— Fetch full PEM data and CT log metadata for a specific SHA-256 fingerprint withget_certificate.
- List all certificates for a domain— Get every certificate ever issued for an exact domain viaget_domain_certificates, optionally filtered to currently valid certs only.
- Enumerate subdomains seen in CT logs— Discover unique subdomains observed for a domain using cursor-based pagination inget_subdomains.
- Find certificates expiring soon— Identify certificates for a domain that expire within a given number of days usingget_expiring_certs.
- Run a global index sweep— Submit an async substring search across the entire CT corpus by CN or SAN withsubmit_global_sweep, then poll results withget_sweep_results.

AnMCP(Model Context Protocol) server that exposesCertIndex's Certificate Transparency search tools to any MCP-compatible client (Claude Desktop, the MCP Inspector, Continue, etc.).

The CertIndex monorepo bundles an MCP server (mounted athttps://api.ctindex.io/mcp) that talks directly to the production Postgres index. This standalone package is a thinclient-sideshim: it speaks MCP to your editor / agent and forwards every tool call to the hosted CertIndex REST API over HTTPS. Two consequences:
- You don't need a copy of the index — sign up for a free API key athttps://ctindex.ioand you're done.
- The package has a tiny dependency footprint (mcp,httpx,pydantic) — easy to audit, easy to vendor, no DB drivers.

pip install git+https://github.com/certindex/certindex-mcp

{ "mcpServers": { "certindex": { "command": "uvx", "args": ["certindex-mcp"], "env": { "CERTINDEX_API_KEY": "ctx_live_..." } } } }

Restart Claude Desktop. The ten CertIndex tools appear in the tool tray.

Ten tools, matching the hosted CertIndex MCP server 1:1:

export CERTINDEX_API_KEY=ctx_live_... npx @modelcontextprotocol/inspector uvx certindex-mcp

Input validation, rate-limit handling, and our supply-chain posture are documented inSECURITY.md. Please report vulnerabilities tosecurity@ctindex.iorather than filing public issues.

git clone https://github.com/certindex/certindex-mcp cd certindex-mcp pip install -e ".[dev]" pytest

Comprehensive audit logging for agent-to-agent interactions — immutable event trails, tamper-evident hashing, structured log export (SIEM-compatible), and compliance-grade retention for regulated industries.

Enforces organisational AI usage policies at the agent layer — blocks prohibited model calls, enforces data residency rules, logs policy violations, and ensures AI governance policies are machine-executable.

Live space data for AI agents — rocket launches, ISS passes, launch news. Free, no auth.

CVE/SBOM security audits, licence compliance, frontend security scanning, domain intelligence, and public records — 55 tools, no API key required Category: Security (also fits: Compliance, Data)

Behavioral trust layer for the AI agent economy. Check MCP server reliability scores, report interactions, detect anomalies, and discover the most trusted servers. 8 tools, free, real-time.

Civilian situational awareness for AI deployments — real-time risk dashboards, multi-source threat correlation, anomaly detection, and automated alerting for critical infrastructure and enterprise AI systems.

Guardrails service for AI agents. Default-deny tool call evaluation with LLM safety analysis, priority-ordered decision matrix, and human-in-the-loop escalations. Session recording, behavioral analysis, MCP proxy, secret redaction, and real-time audit.

Security through absurdity: transforms SQL injection and XSS attempts into harmless comedy responses using AI-powered humor defense.

MCP server to Automate Exposure Management

MCP-native OSINT framework for AI agents. Exposes 9 intelligence tools (email enumeration, username search, breach check, WHOIS, IP intel, subdomain enum, dorks, paste search, phone intel) via Model Context Protocol. Also works as a standalone Python CLI.