Use in your browser
Give the tool any public URL and it opens its own TLS handshakes to the URL's explicit port, or 443 by default. No page is fetched, so an HTTP-scheme input does not prove that plain HTTP is served or redirected. Back comes the protocol versions and certificate the server offers.
Guest includes 50 lifetime app requests. Create a free account for 100 app requests each calendar month. One allowance across every app, in your browser and your agent.One allowance across every app, in your browser and your agent. Manage usage
Guest access is available after setup. Full account linking verified by PowMCP: Claude only.
Connect this app on its own. Add other PowMCP apps whenever your agent needs another job done.
Open the apps workspace
Choose your agent. Each button opens a new tab with only this app's endpoint ready to add.
ClaudeOpen Claude setup Guest access + account linking verified by PowMCP
VS CodeOpen VS Code setup Guest access available · Account linking not yet verified
KiroOpen Kiro setup Guest access available · Account linking not yet verified
LM StudioOpen LM Studio setup Guest access available · Account linking not yet verified
Visual StudioOpen Visual Studio setup (Windows) Guest access available · Account linking not yet verifiedCopy one ready-to-send prompt for any agent that supports remote MCP connections.
For clients that require manual configuration, use this app-only endpoint, its JSON entry, or one terminal command.
ChatGPT: enable Developer mode in Settings → Security and login, then add this MCP endpoint from the Plugins page. Availability depends on your account and workspace policy. PowMCP has not yet verified ChatGPT account linking. OpenAI setup guide
https://powmcp.com/ssl-certificate-check/mcp {
"mcpServers": {
"powmcp-ssl-certificate-check": {
"type": "http",
"url": "https://powmcp.com/ssl-certificate-check/mcp"
}
}
}Terminal agents add this app with one command:
claude mcp add --transport http powmcp-ssl-certificate-check https://powmcp.com/ssl-certificate-check/mcpcodex mcp add powmcp-ssl-certificate-check --url https://powmcp.com/ssl-certificate-check/mcpgemini mcp add --transport http powmcp-ssl-certificate-check https://powmcp.com/ssl-certificate-check/mcpManage, disable, or remove this connection in your agent's own MCP settings. PowMCP does not label an external connection as installed without confirmation from that client.
Proof
An openssl handshake to the URL's explicit port or 443 by default: the TLS versions a server offers, and the certificate it serves
Inspect the certificate and TLS versions served by one resolved endpoint of a public host, including after a certificate renewal. The app opens TLS connections with openssl and reports the certificate's subject, issuer, hostname coverage and validity dates, plus which protocol versions the endpoint accepts. One result does not establish that every load-balanced node was updated or that a browser will trust the site: the probe does not verify the full trust chain, check revocation or inspect cipher suites.
Request cost1 completed result
Guests get 50 lifetime app requests. Free accounts get 100 each calendar month.
ssl_check
Opens its own TLS handshakes to one public host with openssl, using the URL's explicit port or 443 by default, and reports what they establish: which of TLS 1.3, TLS 1.2, TLS 1.1, TLS 1.0 and SSLv3 the server accepts, a protocol-support grade, and the certificate the server actually serves (subject, issuer, covered hostnames, hostname match, and validity dates). Reach for it on padlock, HTTPS, 'Not Secure', certificate-expiry and wrong-hostname questions, and to inspect which certificate is served after a renewal on the probed endpoint; this does not verify every load-balanced node. It does not fetch the page or establish whether plain HTTP is actually served or redirected, and it is not a browser trust decision: no chain-of-trust build, no revocation check, no cipher-suite inspection. Measured 0.05-1.5 seconds against real hosts; each probe is cut off at 12 seconds.
Other apps for the jobs next to SSL Certificate Check.
Scope and boundaries for SSL Certificate Check.
Probe https://example.com to open TLS handshakes to example.com on port 443 and inspect the certificate and supported protocol versions it serves now.
Read https and issues before protocolGrade. When https is true, at least one TLS probe completed on the named host and port; false can also reflect a failed or timed-out probe. The grade covers protocol support only, so even A or A+ can accompany an expired, wrong-hostname, or untrusted certificate. Use certificate and issue evidence to choose renewal, hostname, or protocol work, then verify browser trust separately because this probe samples one endpoint and does not validate chains, revocation, or ciphers.
This is not a browser trust or SSL Labs grade: it does not build the full certificate chain, check revocation, or inspect cipher suites. The page is never fetched, so an http input only probes TLS on the chosen host and port and does not show whether plain HTTP is served or redirected.