dcert (Python)

CI/CD Pipeline PyPI version License: MIT

A Python MCP wrapper for the dcert Rust server.

Uses FastMCP to create a transparent proxy around the dcert-mcp Rust binary, exposing all TLS certificate tools via the Model Context Protocol. New tools added to the Rust binary are automatically available without any Python code changes.

Requirements

  • Python 3.12+
  • The dcert-mcp Rust binary is bundled in platform-specific wheels (no network access needed at runtime)

Installation

pip install dcert

Platform-specific wheels are available for:

  • Linux x86_64 (Ubuntu 22.04+, glibc 2.35+)
  • macOS Intel (x86_64)
  • macOS Apple Silicon (ARM64)

A universal fallback wheel auto-downloads the binary on first use if no platform wheel matches.

Quick Start

As a server

from dcert import create_server

server = create_server()
server.run()  # stdio mode (default)

As a client

import asyncio
from dcert import create_client

async def main():
    async with create_client() as client:
        tools = await client.list_tools()
        print(f"Available tools: {len(tools)}")

        result = await client.call_tool(
            "analyze_certificate", {"target": "example.com"}
        )
        print(result)

asyncio.run(main())

Typed async tool wrappers

For production use with type safety, timeouts, and automatic reconnection:

import asyncio
from dcert.tools import DcertClient

async def main():
    async with DcertClient(timeout=60.0) as dcert:
        # Analyze a certificate
        result = await dcert.analyze_certificate(target="example.com")

        # Check expiry with custom threshold
        expiry = await dcert.check_expiry(target="example.com", days=90)

        # Get TLS connection details
        info = await dcert.tls_connection_info(target="example.com")

        # Export PEM chain
        pem = await dcert.export_pem(target="example.com", output_path="chain.pem")

asyncio.run(main())

All 11 tools are available as typed async methods:

Method Description
analyze_certificate() Decode and analyze TLS certificates
check_expiry() Check certificate expiry within N days
check_revocation() Check OCSP revocation status
compare_certificates() Compare certificates between two targets
tls_connection_info() Get TLS connection details (cipher, protocol, latency)
export_pem() Export certificate chain as PEM
verify_key_match() Verify private key matches a certificate
convert_pfx_to_pem() Convert PKCS12/PFX to PEM files
convert_pem_to_pfx() Convert PEM cert+key to PKCS12/PFX
create_keystore() Create PKCS12 keystore (Java-compatible)
create_truststore() Create PKCS12 truststore from CA certs

Error handling

from dcert.tools import (
    DcertClient,
    DcertError,          # Base exception
    DcertTimeoutError,   # Tool call timed out
    DcertConnectionError,# Subprocess died
    DcertToolError,      # MCP tool returned an error
)

async with DcertClient(timeout=30.0, max_reconnects=3) as dcert:
    try:
        result = await dcert.analyze_certificate(target="example.com")
    except DcertTimeoutError:
        print("Tool call timed out")
    except DcertToolError as e:
        print(f"Tool error: {e} (tool={e.tool})")
    except DcertConnectionError:
        print("Binary subprocess crashed")

CLI

# stdio mode (default, for MCP clients like Claude Code)
dcert-python

# HTTP mode
dcert-python --transport http --host 0.0.0.0 --port 8080

# Pre-download binary (universal wheel only)
dcert-python --setup

# Explicit binary path
dcert-python --binary /usr/local/bin/dcert-mcp

Binary Discovery

The package locates the dcert-mcp Rust binary in this order:

  1. DCERT_MCP_BINARY environment variable
  2. Bundled binary in the package bin/ directory
  3. dcert-mcp on PATH (platform wheels install the binary here)
  4. Auto-download from GitHub Releases (universal wheel fallback, with SHA256 verification)

Environment Variables

The proxy forwards these environment variables to the Rust binary:

Category Variables
Proxy HTTP_PROXY, HTTPS_PROXY, NO_PROXY (and lowercase variants)
TLS SSL_CERT_FILE, SSL_CERT_DIR
dcert DCERT_PATH, DCERT_MCP_TIMEOUT, DCERT_MCP_CONNECTION_TIMEOUT, DCERT_MCP_READ_TIMEOUT

Scalability

This package uses the MCP proxy pattern: the Python layer never needs to know about individual dcert tools. All tool discovery, input schemas, and invocations are forwarded to the Rust binary via the MCP protocol at runtime. When new capabilities are added to the Rust server, they are immediately available through the Python wrapper.

License

MIT

Project links

Data verified by PyPI on Jun 26, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (3.0.44)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for sreengineer from gravatar.com sreengineer

Credits

Author: sreengineer

GitHub Statistics

Data verified by PyPI on Jun 26, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

MIT
View SPDX License List

Requires

Python >=3.10

Provides Extra

dev otel

Tags

ai-tools certificate fastmcp mcp model-context-protocol security tls x509

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

dcert-3.0.40-py3-none-win_amd64.whl (10.9 MB view details)

Uploaded Python 3Windows x86-64

dcert-3.0.40-py3-none-manylinux_2_35_x86_64.whl (8.3 MB view details)

Uploaded Python 3manylinux: glibc 2.35+ x86-64

dcert-3.0.40-py3-none-macosx_11_0_arm64.whl (7.5 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

dcert-3.0.40-py3-none-macosx_10_15_x86_64.whl (7.9 MB view details)

Uploaded Python 3macOS 10.15+ x86-64

dcert-3.0.40-py3-none-any.whl (23.8 kB view details)

Uploaded Python 3

File details

Details for the file dcert-3.0.40-py3-none-win_amd64.whl.

File metadata

  • Download URL: dcert-3.0.40-py3-none-win_amd64.whl
  • Upload date:
  • Size: 10.9 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for dcert-3.0.40-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 2df8e50574d7a6eac7e28672a469f8cb0d672d071bf58a20d513e6b0a2cea4a7
MD5 ff4ea4412ebdab620f05e8684bf0dab9
BLAKE2b-256 44e7c3e5ccb5f5ddc8c0488bcea004f1c53c31119705f12beab02482840dd1ff

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.40-py3-none-win_amd64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.40-py3-none-manylinux_2_35_x86_64.whl.

File metadata

File hashes

Hashes for dcert-3.0.40-py3-none-manylinux_2_35_x86_64.whl
Algorithm Hash digest
SHA256 79a02fa8ddae3f9f3c4544c79a4b7139c453db0e25d3bda113863b93c4a364e7
MD5 b1ce133f9596a07fc96dadbd0c6a194d
BLAKE2b-256 7eee998c4489a4d47b695356fce7fbfcece731be68d8a7cab4c187335d599b53

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.40-py3-none-manylinux_2_35_x86_64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.40-py3-none-macosx_11_0_arm64.whl.

File metadata

File hashes

Hashes for dcert-3.0.40-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 c86e065b8c3c124072a7454e6d1b1c321bb971b8dcd1aefcb52186f53723b47a
MD5 bde523432d4a1d708025c574ddcaf04b
BLAKE2b-256 9473c65f52a1765e3f27d74fcebbbd26b7470b3b44ea58214637012c4aeb11e4

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.40-py3-none-macosx_11_0_arm64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.40-py3-none-macosx_10_15_x86_64.whl.

File metadata

File hashes

Hashes for dcert-3.0.40-py3-none-macosx_10_15_x86_64.whl
Algorithm Hash digest
SHA256 9bdfcd751051aa21da2efbe753da68dd80248750b87942d4bfd62ea8ea20adc7
MD5 e0ecdc85148f383122a479e0abb6b9e7
BLAKE2b-256 c38fe6ced376bb04359ad611bd4d6db782af882140bae7c014e8c0aef16a29f0

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.40-py3-none-macosx_10_15_x86_64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.40-py3-none-any.whl.

File metadata

  • Download URL: dcert-3.0.40-py3-none-any.whl
  • Upload date:
  • Size: 23.8 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for dcert-3.0.40-py3-none-any.whl
Algorithm Hash digest
SHA256 b18e404ceb4b301c7fbe1261a6a6a3b6e5647566d246acdfeba6e252304b962a
MD5 5fbea782416f7ec3f757b3b60592910d
BLAKE2b-256 3f824eeb1ad4bc0019de0b858549c23830a9965c4915649373ad62115e68b22a

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.40-py3-none-any.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page