certificate-monitoring

Monitors SSL/TLS certificate expiration and issues Let's Encrypt certificates via TLS Radar MCP tools.

3.4k|487|Updated Jul 25, 2025
One-click install
npx skills add https://github.com/davepoon/buildwithclaude --skill certificate-monitoring
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: certificate-monitoring
Source: https://github.com/davepoon/buildwithclaude/tree/main/plugins/tlsradar/skills/certificate-monitoring
Command: npx skills add https://github.com/davepoon/buildwithclaude --skill certificate-monitoring

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Tracking SSL/TLS certificate expiration across domains is easy to neglect, and an expired certificate breaks sites and erodes user trust. This Skill routes natural-language questions about certificate health, expiration, and issuance to the correct TLS Radar MCP tool so you can scan domains, monitor certificates, and issue free Let's Encrypt certificates without manual checks.

Core Features & Use Cases

  • Certificate Health Scanning: Run one-off SSL/TLS scans on any domain with tlsradar.scan_domain and review scan history for monitored domains.
  • Expiration Monitoring: Add or remove monitored domains, list certificates expiring soon, and export or import monitor configurations as JSON.
  • Free Certificate Issuance: Issue and renew Let's Encrypt certificates through a CSR-based flow (create_certificatecheck_certificate_propagationfinalize_certificate) that keeps the private key on your machine.
  • Use Case: Ask "is my cert on example.com expiring soon?" and the Skill picks the right tool, reports the expiration status, and can add the domain to monitoring or start a renewal in the same conversation.

Quick Start

Ask the assistant to scan the SSL certificate on your domain and tell you when it expires.

Frequently Asked Questions about certificate-monitoring

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check when my SSL certificate expires?

Ask the assistant to scan your domain, and it calls tlsradar.scan_domain for a one-off SSL/TLS check with no account required. For ongoing tracking, add the domain to monitoring and query expiring certificates with list_expiring_certificates.

How do I issue a free Let's Encrypt certificate from Claude Code?

Generate a private key and CSR locally with openssl, then the Skill runs create_certificate, check_certificate_propagation, and finalize_certificate in sequence. The private key never leaves your machine, and you are never asked for a key passphrase in chat.

Does certificate monitoring require an account or authentication?

One-off scans and all certificate issuance tools are public with no token. Monitor management, account info, scan history, and team invites require OAuth 2.0 + PKCE authentication, which you complete once via the /mcp command in Claude Code.

What happens when the certificate backend is unavailable?

The tools return a structured response with degraded: true and retryable: true instead of a raw error. The Skill informs you it is a transient server-side condition, notes that scanning and monitoring still work, and suggests retrying shortly.

What are the limits of the free TLS Radar plan?

The free plan allows one monitored domain and one expiration alert per month, delivered seven days before expiry. When the limit is reached, the Skill points you to the upgrade pricing page or offers removing an existing monitor as the free alternative.