MCP toolsCheck any pageUpdated
Check a certificate
What does mttr_ssl_check do?
Checks one public host’s SSL certificate with a single TLS handshake: whether it is valid for the name, who issued it, the days left, the chain as sent and whether it verifies, the TLS version agreed, whether TLS 1.0 and 1.1 are still let in, and whether http:// moves to https:// with HSTS. Any key may make this call, on any public site.
When to use it
- Before a certificate expires, or after it was renewed, to see the new one is served.
- A browser, a crawler or an app refuses the site and you want to know why.
What you ask
You say“Is the certificate on example.com valid, and when does it expire?”
mttr_ssl_check({ host: "host" })
| Argument | Type | Needed | What it is |
|---|---|---|---|
host | Text | Yes | The host to check, such as example.com or www.example.com. A full address is taken too, and only its host is used. |
What comes back
- Each finding with its state in a word, and what to do when something is wrong.
- The certificate: names it covers, issuer, dates, key and signature.
- The chain as sent, and the version and cipher agreed.
- Only the handshake is sent on port 443; public addresses only.
| Check | State | What it means |
|---|---|---|
| Name | Matches | The certificate names example.com |
| Dates | Expires soon | Renew it within 18 days |
| Chain | Trusted | It verifies to a trusted root |
| TLS 1.0 and 1.1 | Refused | As they should be |
Made-up sites and figures, to show the shape of the answer. The answer itself is JSON.
Over HTTP
It is GET /api/v1/check/ssl, with your key as a bearer token:
curl "https://mttr.si/api/v1/check/ssl?host=host" \
-H "Authorization: Bearer $MTTR_KEY"When it fails
| When | Status | What to do |
|---|---|---|
| Your assistant has no key yet | 401 over MCP | Sign up with mttr_signup, then connect again with the key it gives. |
| The key has used this hour’s free checks | 429 | The answer says ssl checks are limited to an hourly allowance. Try again within the hour. |
Every error’s wording is in the API reference.
The call in full, with its HTTP address, each argument’s type, who may make it and the call in four languages, is mttr_ssl_check in the API reference.