The TLS Radar MCP server,
connected in one click.

“Use “scan_domain”: Run a free, anonymous SSL/TLS scan against a hostname and return certificate details. No account required.”

“Use “create_certificate”: Start issuing a FREE 90-day Let's Encrypt certificate for a domain (no account required). Step 1 of 3. Pick a validation method with `challe.”

“Use “check_certificate_propagation”: Check whether the DNS TXT records for a certificate order have propagated (Cloudflare/Google/Quad9). Step 2 of issuance - poll until all_fou.”

“Use “finalize_certificate”: Finalize and issue a certificate order in one call: validates the DNS challenges, waits for Let's Encrypt, and returns the issued cert. Step.”

scan_domain — Run a free, anonymous SSL/TLS scan against a hostname and return certificate details. No account required.

create_certificate — Start issuing a FREE 90-day Let's Encrypt certificate for a domain (no account required). Step 1 of 3. Pick a validation method with `challe

check_certificate_propagation — Check whether the DNS TXT records for a certificate order have propagated (Cloudflare/Google/Quad9). Step 2 of issuance - poll until all_fou

finalize_certificate — Finalize and issue a certificate order in one call: validates the DNS challenges, waits for Let's Encrypt, and returns the issued cert. Step

get_certificate_status — Return the current state of a certificate order (dns_pending, validating, ready, completed, failed) and per-authorization Let's Encrypt stat

renew_certificate — Renew a certificate by cloning a recent order (requires the original order_id; Beacon purges orders after ~24h). Returns a new order_id and

register_beacon_order — OBSOLETE - do not call. The cert→monitoring handoff is server-side now (issue via create_certificate, which records the order itself). This

get_account — Return the current user's plan, limits, and usage so the client can render upgrade nudges proactively.