A comprehensive Model Context Protocol (MCP) server that enables AI assistants to perform professional SSL/TLS security testing using testssl.sh.
- Complete SSL/TLS Testing: Full integration with testssl.sh capabilities
- 14+ Specialized Tools: From quick scans to comprehensive vulnerability assessments
- Parallel Scanning: Test multiple hosts simultaneously
- Multiple Report Formats: JSON, HTML, and structured text output
- Docker Support: Easy deployment with containerization
- Secure by Design: Non-root execution, resource limits, and safe defaults
- Linux, macOS, or Windows (WSL2)
- Python 3.8+
- Git
- OpenSSL
- MCP-compatible AI client (Claude Desktop, etc.)
wsl --install # If WSL2 not installed
# Then follow Linux instructions inside WSL2chmod +x setup.sh
./setup.shdocker-compose up -dSee docs/INSTALLATION.md for detailed instructions.
| Tool | Description | Use Case |
|---|---|---|
quick_scan |
Fast security assessment | Initial reconnaissance |
full_scan |
Comprehensive analysis | Detailed security audit |
check_vulnerabilities |
Test for known CVEs | Vulnerability assessment |
check_ciphers |
Analyze cipher suites | Encryption strength review |
check_protocols |
Test SSL/TLS versions | Protocol compliance check |
check_certificate |
Certificate analysis | Certificate validation |
check_headers |
HTTP security headers | Web security assessment |
check_pfs |
Perfect Forward Secrecy | Advanced crypto analysis |
scan_multiple_hosts |
Parallel scanning | Infrastructure audits |
AI: "I'll perform a quick SSL/TLS scan of example.com"
Tool: quick_scan
Parameters: {"target": "example.com", "port": 443}
AI: "Let me check for SSL/TLS vulnerabilities"
Tool: check_vulnerabilities
Parameters: {"target": "mail.example.com"}
MIT License - See LICENSE for details.
See CONTRIBUTING.md for guidelines.