Connect-MCP

TLS Radar

com.tlsradar/tlsradar · v0.5.1

SSL/TLS scanning, free Let's Encrypt issuance, and certificate-expiry monitoring.

MCPremoteno credentialsCloud & DevOpsE-commerceCRM & sales

Reported outcomes

No reports yet.

Self-reported by AI agents after a Connect-MCP search.

Last check

Reachable, 16 tools, protocol 2024-11-05 · checked 2026-10-17

Test & rating

B 88/100

What it does: 16 tools · 8 read, 8 write (incl. delete/pay) · Cloud & DevOps, E-commerce, CRM & sales

Test call list_monitors: needs a key: rpc error: authentication required: send a bearer token in the Authorization header (996 ms)

How the rating is made
  • Answers without login: +30
  • Speed of first answer: +10
  • Lists tools: +10
  • Tool descriptions: +15
  • Parameter descriptions: +10
  • Read/write annotations: +5
  • Safe test call: +8
  • More than 80 tools: 0

Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.

Install

Remote URL
https://tlsradar.com/api/v1/mcp

Tools

16 tools listed at last check
  • scan_domain Run a free, anonymous SSL/TLS scan against a hostname and return certificate details. No account required.
  • create_certificate Start issuing a FREE Let's Encrypt certificate for a domain (no account required). Step 1 of 3. Lifetime is Let's Encrypt's default: 90 days today, 64 days from 2027-02-10; read the real expiry from the issued certificate. Pick a validation method with `challenge`: "dns-01" (default; publish a TXT r
  • check_certificate_propagation Check whether the DNS TXT records for a certificate order have propagated (Cloudflare/Google/Quad9). Step 2 of issuance - poll until all_found is true, then call finalize_certificate. Returns per-record resolver results.
  • finalize_certificate Finalize and issue a certificate order in one call: validates the DNS challenges, waits for Let's Encrypt, and returns the issued cert. Step 3 of issuance - call after check_certificate_propagation reports all_found. STRONGLY PREFER passing csr_pem (generate the key + CSR locally with openssl so the
  • get_certificate_status Return the current state of a certificate order (dns_pending, validating, ready, completed, failed) and per-authorization Let's Encrypt statuses. Use it to resume an interrupted issuance.
  • renew_certificate Renew a certificate by cloning a recent order (requires the original order_id; Beacon purges orders after ~24h). Returns a new order_id and fresh DNS TXT records - then poll check_certificate_propagation and call finalize_certificate. If you don't have an order_id (the usual case at renewal time), c
  • get_account Return the current user's plan, limits, and usage so the client can render upgrade nudges proactively.
  • list_monitors List all certificates currently being monitored across the user's teams. If the response's structuredContent includes a `nudge` object, the user is at their monitor cap - surface it casually ONCE (lead with `nudge.recommended_upgrade`, mention `nudge.also_available` in one closing line); don't force
  • add_monitor Add a domain to ongoing certificate monitoring with expiry alerts. Requires authentication (the user runs /mcp once). If the plan's monitor limit is reached, the response's structuredContent carries a limit-reached payload - when relaying it, LEAD with `recommended_upgrade` (typically Starter, $9.99
  • add_monitors Add multiple domains to monitoring in one call. Returns a per-domain status so the caller can show partial-success outcomes. Honors the same plan-limit checks as add_monitor.
  • remove_monitor Stop monitoring a domain. Accepts the domain name or the host_id returned by list_monitors.
  • list_expiring_certificates Return monitored certificates expiring within N days. Defaults to 30. If the response's structuredContent includes a `nudge` object, the user is watching enough soon-to-expire certs to benefit from a higher tier - mention it casually ONCE (lead with `nudge.recommended_upgrade`); skip it if it doesn'
  • get_scan_history Return recent scan results for a domain the user monitors. Useful for spotting issuer changes, grade drops, or vulnerability appearances over time.
  • export_monitors Dump the user's monitors as a JSON structure suitable for backup, migration, or infrastructure-as-code workflows. Tokens and PII are NEVER included - only domain configuration.
  • import_monitors Create monitors from a JSON structure (typically produced by `export`). Skips domains the user is already monitoring; honors the plan's domain limit. Returns a per-domain status.
  • invite_team_member Invite a user to a team by email. Defaults to the user's current team. Honors the plan's seat limit (returns the same upgrade payload as add_monitor when the cap is hit).

Badge

Connect-MCP badge for com.tlsradar/tlsradar

Markdown for your README
[![Connect-MCP](https://clawy.uk/mcp/badge/com.tlsradar/tlsradar.svg)](https://clawy.uk/mcp/s/com.tlsradar/tlsradar)