Categories › Security › Code & dependency scanning
SSL/TLS scanning, free Let's Encrypt issuance, and certificate-expiry monitoring.
Remote server: your requests and data go to tlsradar.com. Claude Code: claude mcp add --transport http tls-radar https://tlsradar.com/api/v1/mcp · Claude app: Settings → Connectors → Add custom connector.
The tools this server listed when we connected to it, in its own words.
scan_domain — Run a free, anonymous SSL/TLS scan against a hostname and return certificate details. No account required.create_certificate — Start issuing a FREE Let's Encrypt certificate for a domain (no account required). Step 1 of 3. Lifetime is Let's Encrypt's default: 90 dayscheck_certificate_propagation — Check whether the DNS TXT records for a certificate order have propagated (Cloudflare/Google/Quad9). Step 2 of issuance - poll until all_foufinalize_certificate — Finalize and issue a certificate order in one call: validates the DNS challenges, waits for Let's Encrypt, and returns the issued cert. Stepget_certificate_status — Return the current state of a certificate order (dns_pending, validating, ready, completed, failed) and per-authorization Let's Encrypt statrenew_certificate — Renew a certificate by cloning a recent order (requires the original order_id; Beacon purges orders after ~24h). Returns a new order_id and get_account — Return the current user's plan, limits, and usage so the client can render upgrade nudges proactively.list_monitors — List all certificates currently being monitored across the user's teams. If the response's structuredContent includes a `nudge` object, the add_monitor — Add a domain to ongoing certificate monitoring with expiry alerts. Requires authentication (the user runs /mcp once). If the plan's monitor add_monitors — Add multiple domains to monitoring in one call. Returns a per-domain status so the caller can show partial-success outcomes. Honors the sameremove_monitor — Stop monitoring a domain. Accepts the domain name or the host_id returned by list_monitors.list_expiring_certificates — Return monitored certificates expiring within N days. Defaults to 30. If the response's structuredContent includes a `nudge` object, the useget_scan_history — Return recent scan results for a domain the user monitors. Useful for spotting issuer changes, grade drops, or vulnerability appearances oveexport_monitors — Dump the user's monitors as a JSON structure suitable for backup, migration, or infrastructure-as-code workflows. Tokens and PII are NEVER iimport_monitors — Create monitors from a JSON structure (typically produced by `export`). Skips domains the user is already monitoring; honors the plan's domainvite_team_member — Invite a user to a team by email. Defaults to the user's current team. Honors the plan's seat limit (returns the same upgrade payload as addNot tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.