mcpbeat Sign in

ctlogs.dev — Certificate Transparency search MCP Server

answering

ctlogs.dev — Certificate Transparency search is answering right now. Last checked 3 min ago. It exposes 5 tools. Last commit 12 Nov 2026.

Search Certificate Transparency logs: subdomains, TLS certificates, organizations, CAs.

Uptime history 8 hours of history
8 hours agonow
100.0%
Uptime 24h
27 of 27 checks
5
Tools
read from the server
211 ms
Response time
average over 24h
0
Stars
last commit 12 Nov 2026

Nothing serious here today

Today is the operative word: we check ctlogs.dev — Certificate Transparency search every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 3 min ago.

run in your terminal
claude mcp add certificate-transparency --transport http https://mcp.ctlogs.dev/mcp
Settings → Connectors → Add custom connector, then paste this address
https://mcp.ctlogs.dev/mcp
~/.codex/config.toml
[mcp_servers.certificate-transparency]
url = "https://mcp.ctlogs.dev/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "certificate-transparency": {
      "url": "https://mcp.ctlogs.dev/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "certificate-transparency": {
      "type": "http",
      "url": "https://mcp.ctlogs.dev/mcp"
    }
  }
}

Available tools 5

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

certificate
get_certificate
Return the full record of one certificate: subject, issuer, serial number, validity, DNS names, key and signature details, the CT log entries that recorded it and download URLs for the certificate body. id is the id field of a search result or the certificate's SHA-256 fingerprint (64 hex characters).
certificates
search_certificates
List TLS certificates issued for a domain name: id, matching names, issuer, serial number and validity dates. By default matches the exact name; set include_subdomains to true to also match every name under it. Covers certificates valid now or expired within the last 90 days unless archive is set to "full" or a year from 2013 (needs an API key on the Pro plan). Pass a row's id to get_certificate for the full record. To list hostnames rather than certificates, use find_subdomains.
get
get_ca
Return one issuing CA certificate by its SHA-256 fingerprint (the issuer_ca field of get_certificate): subject, issuer, validity, parent and cross-signed certificates, the number of certificates it issued and a page of them.
organization
search_organization
List TLS certificates whose subject organization matches a name, e.g. "PayPal, Inc.": id, subject common name, domains, issuer and validity dates. Covers certificates valid now or expired within the last 90 days unless archive is set to "full" or a year from 2013 (needs an API key on the Pro plan). One call counts as 10 requests against the rate limit.
subdomains
find_subdomains
List the hostnames found under a domain in TLS certificates: one row per hostname with the number of certificates and first/last seen dates. Covers certificates valid now or expired within the last 90 days; set history to true for every hostname certified since 2013 (needs an API key on the Pro Lite or Pro plan). Use this to enumerate subdomains; use search_certificates for the certificates themselves.

Endpoints

URLTransportStateLatencyChecked
https://mcp.ctlogs.dev/mcp streamable-http answering 203 ms 3 min ago

Alternatives to ctlogs.dev — Certificate Transparency search

same job, measured the same way
Crtsh
by pipeworx-io

crt.sh — Certificate Transparency log search

115 installs/wk 46 tools answering
C
crt.sh SSL Certificate Transparency & Subdomain Recon
by ceadigital

Query crt.sh SSL/TLS Certificate Transparency logs for subdomain discovery and certificate audits.

28 tools answering
CISA KEV Ransomware CVE, SSL CT Logs & Domain Recon
by jesleytassili-glitch

Audit active CISA KEV ransomware CVEs, SSL/TLS CT log subdomains, SPF/DMARC security & ICANN RDAP.

answering
NinjaOne
by wyre-ai

MCP server for NinjaOne RMM — devices, organizations, alerts, and tickets.

local only
NinjaOne
by wyre-technology

MCP server for NinjaOne RMM — devices, organizations, alerts, and tickets.

local only
Notify
by notifycx

Transactional email for coding agents: send, test, verify domains, webhooks, logs.

173 installs/wk local only
HISTOR — MCP tool-definition transparency log
by alexar76

Check, diff and history of MCP tool definitions, from a public signed log of 88k+ servers.

2 258 installs/wk local only
EvalGate
by evalgate

Create and run AI evaluations, record traces, and inspect results with scoped organization access.

12 tools answering

ctlogs.dev — Certificate Transparency search — questions

Answers built from our own checks of this server.

What can ctlogs.dev — Certificate Transparency search do?
It exposes 5 tools, read directly from the server on our last check. Among them: find_subdomains, get_ca, get_certificate, search_certificates, search_organization. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is ctlogs.dev — Certificate Transparency search working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 27 of 27 checks got a reply (100.0%), average response time 211 ms. The bar chart above shows every period we have measured.
How do I connect ctlogs.dev — Certificate Transparency search?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does ctlogs.dev — Certificate Transparency search need an API key?
No. ctlogs.dev — Certificate Transparency search completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 5 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is ctlogs.dev — Certificate Transparency search?
It answers our handshake in 211 ms on average, which is faster than 68% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.
Is ctlogs.dev — Certificate Transparency search open source?
The code is open source: it is published under the MIT licence and 0 stars on GitHub. The licence covers the code in the repository, not the hosted service at mcp.ctlogs.dev, which runs on its operator's own terms.