How do I install the certindex mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

It reads `CERTINDEX_API_KEY`, `CERTINDEX_BASE_URL` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Certindex MCP Server

Certificate Transparency search for AI agents: certs, subdomains, issuance history, expiry.

Remote serverstreamable-httpPython

What is the Certindex MCP Server?

Certificate Transparency search for AI agents: certs, subdomains, issuance history, expiry.

The short version

CertIndex indexes the full public CT corpus (~5 M certificates, growing ~100 k/day). This server wraps the public CertIndex REST API so an LLM can ask questions like:

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
search_certificates	Search the CT index by domain, CN, issuer, SAN, validity, or wildcard status.
get_certificate	Fetch a single cert by SHA-256 fingerprint.
get_domain_certificates	Every cert ever issued for an exact domain.
get_subdomains	Enumerate unique subdomains seen in CT.
get_latest_cert	Most recent currently-valid cert for a domain.
get_expiring_certs	Certs for a domain expiring within days days.
submit_global_sweep	Submit an async, domain-less CN/SAN substring sweep of the entire index (POST /v1/sweeps).
get_sweep_results	Poll a sweep job and paginate its results when done (GET /v1/sweeps/{id}).
get_usage	Caller's tier, current usage, remaining quota, and entitlements.
get_historical_backfill_status	Check / start the paid deep-history backfill for a domain.

Configuration

Variable	Description	Required
CERTINDEX_API_KEY	Credential the server authenticates with.	Yes
CERTINDEX_BASE_URL	Endpoint or connection string the server talks to.	Yes

Example prompts to try

“Use Certindex to search certificates.”
“Use Certindex to get certificate.”
“Use Certindex to get domain certificates.”

Frequently asked questions

Certificate Transparency search for AI agents: certs, subdomains, issuance history, expiry. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.

Alternatives to the Certindex MCP Server

Filesystem

Official

Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.

File Systems & StorageTypeScript★ 63.0k

Context7

Official

Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.

Documentation & API ReferencesRemoteTypeScript★ 32.0k

Kensho-kema

Japan X/Twitter sweepstakes data from ke-ma.net. Tools: search, history, prize movers.

Developer Tools

Srclight

Srclight builds a rich, searchable index of your codebase that AI coding agents can query instantly — replacing dozens of grep/glob calls with

Developer ToolsPython

Sverklo

Local-first repo-memory MCP for coding agents. Best for relationship-heavy edits: symbols, callers, dependencies, diff review, and git-pinned

Developer ToolsRemotePython

Nature

Nature Remo API client