dcert (Python)

CI/CD Pipeline PyPI version License: MIT

A Python MCP wrapper for the dcert Rust server.

Uses FastMCP to create a transparent proxy around the dcert-mcp Rust binary, exposing all TLS certificate tools via the Model Context Protocol. New tools added to the Rust binary are automatically available without any Python code changes.

Requirements

  • Python 3.12+
  • The dcert-mcp Rust binary is bundled in platform-specific wheels (no network access needed at runtime)

Installation

pip install dcert

Platform-specific wheels are available for:

  • Linux x86_64 (Ubuntu 22.04+, glibc 2.35+)
  • macOS Intel (x86_64)
  • macOS Apple Silicon (ARM64)

A universal fallback wheel auto-downloads the binary on first use if no platform wheel matches.

Quick Start

As a server

from dcert import create_server

server = create_server()
server.run()  # stdio mode (default)

As a client

import asyncio
from dcert import create_client

async def main():
    async with create_client() as client:
        tools = await client.list_tools()
        print(f"Available tools: {len(tools)}")

        result = await client.call_tool(
            "analyze_certificate", {"target": "example.com"}
        )
        print(result)

asyncio.run(main())

Typed async tool wrappers

For production use with type safety, timeouts, and automatic reconnection:

import asyncio
from dcert.tools import DcertClient

async def main():
    async with DcertClient(timeout=60.0) as dcert:
        # Analyze a certificate
        result = await dcert.analyze_certificate(target="example.com")

        # Check expiry with custom threshold
        expiry = await dcert.check_expiry(target="example.com", days=90)

        # Get TLS connection details
        info = await dcert.tls_connection_info(target="example.com")

        # Export PEM chain
        pem = await dcert.export_pem(target="example.com", output_path="chain.pem")

asyncio.run(main())

All 11 tools are available as typed async methods:

Method Description
analyze_certificate() Decode and analyze TLS certificates
check_expiry() Check certificate expiry within N days
check_revocation() Check OCSP revocation status
compare_certificates() Compare certificates between two targets
tls_connection_info() Get TLS connection details (cipher, protocol, latency)
export_pem() Export certificate chain as PEM
verify_key_match() Verify private key matches a certificate
convert_pfx_to_pem() Convert PKCS12/PFX to PEM files
convert_pem_to_pfx() Convert PEM cert+key to PKCS12/PFX
create_keystore() Create PKCS12 keystore (Java-compatible)
create_truststore() Create PKCS12 truststore from CA certs

Error handling

from dcert.tools import (
    DcertClient,
    DcertError,          # Base exception
    DcertTimeoutError,   # Tool call timed out
    DcertConnectionError,# Subprocess died
    DcertToolError,      # MCP tool returned an error
)

async with DcertClient(timeout=30.0, max_reconnects=3) as dcert:
    try:
        result = await dcert.analyze_certificate(target="example.com")
    except DcertTimeoutError:
        print("Tool call timed out")
    except DcertToolError as e:
        print(f"Tool error: {e} (tool={e.tool})")
    except DcertConnectionError:
        print("Binary subprocess crashed")

CLI

# stdio mode (default, for MCP clients like Claude Code)
dcert-python

# HTTP mode
dcert-python --transport http --host 0.0.0.0 --port 8080

# Pre-download binary (universal wheel only)
dcert-python --setup

# Explicit binary path
dcert-python --binary /usr/local/bin/dcert-mcp

Binary Discovery

The package locates the dcert-mcp Rust binary in this order:

  1. DCERT_MCP_BINARY environment variable
  2. Bundled binary in the package bin/ directory
  3. dcert-mcp on PATH (platform wheels install the binary here)
  4. Auto-download from GitHub Releases (universal wheel fallback, with SHA256 verification)

Environment Variables

The proxy forwards these environment variables to the Rust binary:

Category Variables
Proxy HTTP_PROXY, HTTPS_PROXY, NO_PROXY (and lowercase variants)
TLS SSL_CERT_FILE, SSL_CERT_DIR
dcert DCERT_PATH, DCERT_MCP_TIMEOUT, DCERT_MCP_CONNECTION_TIMEOUT, DCERT_MCP_READ_TIMEOUT

Scalability

This package uses the MCP proxy pattern: the Python layer never needs to know about individual dcert tools. All tool discovery, input schemas, and invocations are forwarded to the Rust binary via the MCP protocol at runtime. When new capabilities are added to the Rust server, they are immediately available through the Python wrapper.

License

MIT

Project links

Data verified by PyPI on Jun 17, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (3.0.44)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for sreengineer from gravatar.com sreengineer

Credits

Author: sreengineer

GitHub Statistics

Data verified by PyPI on Jun 17, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

MIT
View SPDX License List

Requires

Python >=3.10

Provides Extra

dev otel

Tags

ai-tools certificate fastmcp mcp model-context-protocol security tls x509

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

dcert-3.0.39-py3-none-win_amd64.whl (10.8 MB view details)

Uploaded Python 3Windows x86-64

dcert-3.0.39-py3-none-manylinux_2_35_x86_64.whl (8.1 MB view details)

Uploaded Python 3manylinux: glibc 2.35+ x86-64

dcert-3.0.39-py3-none-macosx_11_0_arm64.whl (7.4 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

dcert-3.0.39-py3-none-macosx_10_15_x86_64.whl (7.8 MB view details)

Uploaded Python 3macOS 10.15+ x86-64

dcert-3.0.39-py3-none-any.whl (23.8 kB view details)

Uploaded Python 3

File details

Details for the file dcert-3.0.39-py3-none-win_amd64.whl.

File metadata

  • Download URL: dcert-3.0.39-py3-none-win_amd64.whl
  • Upload date:
  • Size: 10.8 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for dcert-3.0.39-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 6e00cda663aaccc8788f1e97175d7b7c8e1347fcd94ff30a572956459ce31bd1
MD5 930ce16bf9d6720e6810858b3bf2ccc3
BLAKE2b-256 dc58a973d0a8842d52ba1d2623f4a60f05dd52e217cbe79b00ce153ebb35466a

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.39-py3-none-win_amd64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.39-py3-none-manylinux_2_35_x86_64.whl.

File metadata

File hashes

Hashes for dcert-3.0.39-py3-none-manylinux_2_35_x86_64.whl
Algorithm Hash digest
SHA256 f15874bf882a2dbf537a8e97c268573e578cf0b22421bda08542ade662599678
MD5 a2814d7087b3c58aa6e717f79517ed9e
BLAKE2b-256 c4e9fa28c4c59024e159e1d245c7680ff0e14b9a96d6fb93768776765e0bbe2b

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.39-py3-none-manylinux_2_35_x86_64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.39-py3-none-macosx_11_0_arm64.whl.

File metadata

File hashes

Hashes for dcert-3.0.39-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 c3ae0eeecc049329fbf55815b7f318dec0b93791efaa63f7c0c49132b59827dc
MD5 eff7a845e58f1fa9db2df4474393b100
BLAKE2b-256 569a57cc503ce5efb688cce3228ac19385cb7fad3d35dd25266d4542605e17fa

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.39-py3-none-macosx_11_0_arm64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.39-py3-none-macosx_10_15_x86_64.whl.

File metadata

File hashes

Hashes for dcert-3.0.39-py3-none-macosx_10_15_x86_64.whl
Algorithm Hash digest
SHA256 1a397e93483ffcc807155e4d939daee4aeb2d4b0bd1f9cbabea8ad9a25fa0a11
MD5 e8c4ee3a296248dc10e5e909f5437663
BLAKE2b-256 1265c4014f981c62019b638845ab17fa9a2e86be699574b976c7abce4a86348f

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.39-py3-none-macosx_10_15_x86_64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.39-py3-none-any.whl.

File metadata

  • Download URL: dcert-3.0.39-py3-none-any.whl
  • Upload date:
  • Size: 23.8 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for dcert-3.0.39-py3-none-any.whl
Algorithm Hash digest
SHA256 fff3ac07b89b9a75625e63bbbc23a9c0c0846d92a3d681cca2f3da76778ea733
MD5 fc3f7f6f0727a43a124a36a91b0a4d9c
BLAKE2b-256 7ee0d7902978f65513a9f78d28c6b27784a8207d925cab8a258bfdd11d5b17ac

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.39-py3-none-any.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page