crt.sh SSL Certificate Transparency & Subdomain Recon MCP Server

by ceadigital Your server? Claim it

answering

crt.sh SSL Certificate Transparency & Subdomain Recon is answering right now. Last checked 10 min ago. It exposes 28 tools.

Query crt.sh SSL/TLS Certificate Transparency logs for subdomain discovery and certificate audits.

Uptime history 46 hours of history

46 hours agonow

100.0%

Uptime 24h

91 of 91 checks

Tools

read from the server

222 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 1

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 6 November 2026. No other catalogue keeps this.

6 Nov a tool appeared agent_url_to_clean_markdown

Nothing serious here today

Today is the operative word: we check crt.sh SSL Certificate Transparency & Subdomain Recon every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add crtsh-cert-transparency --transport http https://ceadigital.io/mcp/crtsh

Settings → Connectors → Add custom connector, then paste this address

https://ceadigital.io/mcp/crtsh

~/.codex/config.toml

[mcp_servers.crtsh-cert-transparency]
url = "https://ceadigital.io/mcp/crtsh"

.cursor/mcp.json

{
  "mcpServers": {
    "crtsh-cert-transparency": {
      "url": "https://ceadigital.io/mcp/crtsh"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "crtsh-cert-transparency": {
      "type": "http",
      "url": "https://ceadigital.io/mcp/crtsh"
    }
  }
}

Available tools 28

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

agent

agent_base_tx_simulate

High-velocity Agent Operational Primitive ($0.005 USDC on Base): Pre-execution Base L2 (eip155:8453) calldata simulator & wallet drain guard via eth_call + eth_estimateGas + unlimited ERC-20 approve detection.

agent_clean_web_grounding

High-velocity Agent Operational Primitive ($0.008 USDC on Base): Fast, token-optimized real-time web grounding & clean Markdown synthesis stripped of HTML bloat, ads, and scripts for LLM context windows.

agent_compliance_notary_attest

Tamper-evident SHA-256 hash-chained Agent Decision & Compliance Notary for EU AI Act, NIST AI RMF, and SOC2 autonomous agent audit trails.

agent_token_intel_and_honeypot

High-velocity Agent Operational Primitive ($0.005 USDC on Base): Real-time DEX pool liquidity, 24h volume, buy/sell execution symmetry, Base bytecode check, and deterministic 0-100 Honeypot & Anti-Rug Safety Score.

agent_url_to_clean_markdown

High-velocity Agent Operational Primitive ($0.005 USDC on Base): Live URL-to-Clean-Markdown extractor competing with Firecrawl/Jina. Fetches any public URL via SSRF-safe HTTP + LegalTDMGuard and returns clean, prompt-injection-scrubbed Markdown.

cfpb

cfpb_complaints

Query US Consumer Financial Protection Bureau (CFPB) complaint database (17 U.S.C. § 105 public domain).

cisa

cisa_kev_exploited_vulns

Query US CISA Known Exploited Vulnerabilities (KEV) Catalog for active in-the-wild exploitation, mandatory federal patch due dates, and ransomware usage.

corporate

corporate_kyb_and_risk_dossier

5-Source Parallel Composite Dossier: Joins GLEIF LEI + SEC EDGAR + CFPB Complaints + USASpending Federal Awards + FDIC in <400ms with a 0-100 Counterparty Verification Score.

crtsh

crtsh_cert_recon

Query Sectigo Certificate Transparency logs (crt.sh) for issued SSL/TLS certificates and subdomains.

cyber

cyber_supply_chain_security_dossier

5-Source Parallel Security Dossier: Joins crt.sh SSL Certs + Google deps.dev OpenSSF Scorecard + FIRST.org EPSS + CISA KEV + OSV.dev CVEs in <400ms with a 0-100 Security Posture Score.

depsdev

depsdev_openssf_scorecard

Query Google Open Source Insights (deps.dev) and Linux Foundation OpenSSF Security Scorecard (0-10) for any GitHub repository or package (#1 in MCP Registry).

dexscreener

dexscreener_token_audit

Real-time DEX liquidity, price, pair volume, and market cap analytics via DexScreener.

epss

epss_exploit_score

Query FIRST.org Exploit Prediction Scoring System (EPSS) for 30-day real-world exploit probability.

fdic

fdic_bank_health

Factual public supervisory bank health and branch metrics compiled from FDIC under 12 CFR Part 328.

gcp

gcp_catalog_search

Sub-millisecond FTS5 search across 17,671 Google Cloud, Vertex AI, and A2A service records.

github

github_repo_pulse

Extract repository activity pulse (stars, forks, open issues, license, last push) with ETag caching.

gleif

gleif_lei_kyb

Query Global Legal Entity Identifier Foundation (GLEIF) registry for corporate KYB and LEI records.

npi

npi_medical_registry

CMS NPPES NPI Registry lookup for healthcare organizations and facilities (NPI-2 only, HIPAA safe harbor).

nyfed

nyfed_sofr_reference_rates

Query Federal Reserve Bank of New York official Secured Overnight Financing Rate (SOFR) benchmark rates, percentiles, and daily repo volume (#1 in MCP Registry).

openalex

openalex_citation_graph

Academic citation graph metadata and scholarly network metrics from OpenAlex (CC0).

package

package_health_pulse

Parallel health pulse inspection across NPM and PyPI ecosystems.

provision

provision_free_developer_key

FREE Self-Serve API Key Generator: Instantly mints a 50-call free starter `cea_live_` Bearer token with copy-paste snippets for Claude Desktop, Cursor, Windsurf, ElizaOS, and Coinbase AgentKit.

sec

sec_edgar_cik_lookup

SEC EDGAR company submission facts, quarterly filings, and CIK lookup under Lowe v. SEC Publisher's Exclusion.

security

security_cve_audit

Audit package vulnerabilities and CVE advisories via OSV.dev database.

submit

submit_feedback_or_rate_quote

Free interactive MCP feedback, feature requests, and custom rate quote negotiation (alias: submit_mcp_feedback_or_request).

usaspending

usaspending_awards

Query USASpending.gov Federal Awards and Contractor Intelligence (17 U.S.C. § 105 public domain).

usgs

usgs_seismic_hazard

Seismic activity and earthquake risk profiles from USGS GeoJSON services.

vault

vault_knowledge_search

FTS5 search across 36,628 video transcript chunks and 106,308 knowledge graph triples in vault.db.

Endpoints

URL	Transport	State	Latency	Checked
https://ceadigital.io/mcp/crtsh	streamable-http	answering	215 ms	10 min ago

Alternatives to crt.sh SSL Certificate Transparency & Subdomain Recon

same job, measured the same way

Crtsh

by pipeworx-io

crt.sh — Certificate Transparency log search

333 installs/wk 46 tools answering

CISA KEV Ransomware CVE, SSL CT Logs & Domain Recon

by jesleytassili-glitch

Audit active CISA KEV ransomware CVEs, SSL/TLS CT log subdomains, SPF/DMARC security & ICANN RDAP.

answering

WeSupport-AI

by petros-poli

Read-only AICS onboarding, agent discovery, public forum, identity and transparency-log tools.

200 installs/wk local only

mcp-audit

by firatmio

Transparent audit proxy for MCP servers: logs every tool call, flags poisoning and rug pulls.

40 installs/wk local only

Infra Health & SSL Monitor MCP

by ansarii

Monitors TLS/SSL certificate expiry, DNS resolution, and TCP port status for AI agents.

answering

ExpiryOwl

by expiryowl

SSL certificate, domain expiry, DNS and uptime monitoring for web agencies, grouped by client.

answering

TLS Radar

by tlsradar

SSL/TLS scanning, free Let's Encrypt issuance, and certificate-expiry monitoring.

16 tools answering

Sslwebsites

by jyswee

SSL certificate management for coding agents. Issue, renew, monitor certs. 10 tools stdio.

46 installs/wk local only

crt.sh SSL Certificate Transparency & Subdomain Recon — questions

Answers built from our own checks of this server.

What can crt.sh SSL Certificate Transparency & Subdomain Recon do?

It exposes 28 tools, read directly from the server on our last check. Among them: agent_base_tx_simulate, agent_clean_web_grounding, agent_compliance_notary_attest, agent_token_intel_and_honeypot, agent_url_to_clean_markdown, cfpb_complaints and 22 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is crt.sh SSL Certificate Transparency & Subdomain Recon working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 222 ms. The bar chart above shows every period we have measured.

How do I connect crt.sh SSL Certificate Transparency & Subdomain Recon?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does crt.sh SSL Certificate Transparency & Subdomain Recon need an API key?

No. crt.sh SSL Certificate Transparency & Subdomain Recon completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 28 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is crt.sh SSL Certificate Transparency & Subdomain Recon?

It answers our handshake in 222 ms on average, which is faster than 65% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.