What is ctlogs.dev?
ctlogs.dev searches the public Certificate Transparency logs, where every publicly trusted TLS certificate is recorded. Connected to it, an assistant can answer questions such as "which subdomains does example.com have", "who issued the certificates for this name" or "which domains does this company hold certificates for".
It is a remote server: there is nothing to install, and it works at once without a key or an account.
Tools
- find_subdomains — the hostnames found under a domain in TLS certificates, with the number of certificates and first/last seen dates.
- search_certificates — the certificates issued for a domain name, with issuer, serial number and validity dates.
- search_organization — the certificates whose subject organization matches a name.
- get_certificate — the full record of one certificate, including its DNS names and the CT log entries that recorded it.
- get_ca — one issuing CA certificate and the certificates it issued.
All tools are read-only. Results cover certificates that are valid now or expired within the last 90 days.
Connect
Add the server by URL: https://mcp.ctlogs.dev/mcp (Streamable HTTP).
Claude Code:
claude mcp add --transport http ctlogs https://mcp.ctlogs.dev/mcp
Setup for Claude, ChatGPT, Cursor and VS Code: https://ctlogs.dev/mcp
Limits and sign-in
The server works without an account up to the anonymous limits. Past them an assistant that supports sign-in asks you to sign in with GitHub, Google or an e-mail link; a new account gets a free API key with 10,000 credits a month for testing and non-commercial use. Clients where you set request headers yourself can send a key instead.
Comments