CertBridge MCP

Local MCP server that lets an assistant run the ACME certificate lifecycle: ordering, HTTP-01/DNS-01 validation, downloading and renewing TLS certificates.

What you can do

• Order certificates through ACME from an assistant session
• Complete domain validation via HTTP-01 or DNS-01 challenges
• Download issued certificates to a local state directory
• Renew existing certificates
• Keep ACME account keys, orders, certificates and an audit log in one state directory

When to use it

Useful when you want an assistant to obtain or renew TLS certificates for your own domains without leaving the chat, for example setting up HTTPS on a small server or automating renewal checks.

Requirements

Runs as a local process over stdio, distributed as a Docker image, so Docker is needed. The CERTBRIDGE_HOME environment variable sets the state directory for account keys, orders, certificates and the audit log; it defaults to a certbridge-state folder beside the server. Network access to an ACME certificate authority and to the domains being validated is required.