SSL/TLS Checker MCP Server

ssltest.com speaks the Model Context Protocol over the Streamable HTTP transport, so an AI agent can run an SSL/TLS scan as a native tool. No key, no signup.

Tool

Tool	Input	Returns
ssl_check	host, port?, protocol?	The full graded report (same shape as GET /v1/check)

How it works

• Read-only. ssl_check only connects to the host you name, the same way a browser's TLS handshake would.
• Cached. Results are keyed by host, port, and protocol, and cached for 24 hours, so repeated calls are fast.
• Blocking, up to ~90s. Unlike a poll-by-recall tool, ssl_check awaits the scan in the same call: a cold check typically returns in a few seconds. If a scan is still running after the wait budget, the tool returns an error asking you to call it again; the scan itself keeps running and the retry lands on the cache.
• Rate-limited. No key is needed. Calls are rate-limited per client for abuse prevention.

Connect your client

Claude Code

claude mcp add --transport http ssltest https://api.ssltest.com/mcp

Cursor, Windsurf, Claude Desktop (MCP config)

{
  "mcpServers": {
    "ssltest": {
      "url": "https://api.ssltest.com/mcp"
    }
  }
}

VS Code (GitHub Copilot)

code --add-mcp '{"name":"ssltest","type":"http","url":"https://api.ssltest.com/mcp"}'

Gemini CLI (~/.gemini/settings.json)

{
  "mcpServers": {
    "ssltest": {
      "httpUrl": "https://api.ssltest.com/mcp"
    }
  }
}

Codex (~/.codex/config.toml)

[mcp_servers.ssltest]
url = "https://api.ssltest.com/mcp"

Raw protocol

Stateless JSON-RPC 2.0 over a single POST. List the tools:

curl -s https://api.ssltest.com/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Spec and registry

The transport is Streamable HTTP, stateless (no Mcp-Session-Id). Manifest: server.json.