dcert (Python)

CI/CD Pipeline PyPI version License: MIT

A Python MCP wrapper for the dcert Rust server.

Uses FastMCP to create a transparent proxy around the dcert-mcp Rust binary, exposing all TLS certificate tools via the Model Context Protocol. New tools added to the Rust binary are automatically available without any Python code changes.

Requirements

  • Python 3.12+
  • The dcert-mcp Rust binary is bundled in platform-specific wheels (no network access needed at runtime)

Installation

pip install dcert

Platform-specific wheels are available for:

  • Linux x86_64 (Ubuntu 22.04+, glibc 2.35+)
  • macOS Intel (x86_64)
  • macOS Apple Silicon (ARM64)

A universal fallback wheel auto-downloads the binary on first use if no platform wheel matches.

Quick Start

As a server

from dcert import create_server

server = create_server()
server.run()  # stdio mode (default)

As a client

import asyncio
from dcert import create_client

async def main():
    async with create_client() as client:
        tools = await client.list_tools()
        print(f"Available tools: {len(tools)}")

        result = await client.call_tool(
            "analyze_certificate", {"target": "example.com"}
        )
        print(result)

asyncio.run(main())

Typed async tool wrappers

For production use with type safety, timeouts, and automatic reconnection:

import asyncio
from dcert.tools import DcertClient

async def main():
    async with DcertClient(timeout=60.0) as dcert:
        # Analyze a certificate
        result = await dcert.analyze_certificate(target="example.com")

        # Check expiry with custom threshold
        expiry = await dcert.check_expiry(target="example.com", days=90)

        # Get TLS connection details
        info = await dcert.tls_connection_info(target="example.com")

        # Export PEM chain
        pem = await dcert.export_pem(target="example.com", output_path="chain.pem")

asyncio.run(main())

All 11 tools are available as typed async methods:

Method Description
analyze_certificate() Decode and analyze TLS certificates
check_expiry() Check certificate expiry within N days
check_revocation() Check OCSP revocation status
compare_certificates() Compare certificates between two targets
tls_connection_info() Get TLS connection details (cipher, protocol, latency)
export_pem() Export certificate chain as PEM
verify_key_match() Verify private key matches a certificate
convert_pfx_to_pem() Convert PKCS12/PFX to PEM files
convert_pem_to_pfx() Convert PEM cert+key to PKCS12/PFX
create_keystore() Create PKCS12 keystore (Java-compatible)
create_truststore() Create PKCS12 truststore from CA certs

Error handling

from dcert.tools import (
    DcertClient,
    DcertError,          # Base exception
    DcertTimeoutError,   # Tool call timed out
    DcertConnectionError,# Subprocess died
    DcertToolError,      # MCP tool returned an error
)

async with DcertClient(timeout=30.0, max_reconnects=3) as dcert:
    try:
        result = await dcert.analyze_certificate(target="example.com")
    except DcertTimeoutError:
        print("Tool call timed out")
    except DcertToolError as e:
        print(f"Tool error: {e} (tool={e.tool})")
    except DcertConnectionError:
        print("Binary subprocess crashed")

CLI

# stdio mode (default, for MCP clients like Claude Code)
dcert-python

# HTTP mode
dcert-python --transport http --host 0.0.0.0 --port 8080

# Pre-download binary (universal wheel only)
dcert-python --setup

# Explicit binary path
dcert-python --binary /usr/local/bin/dcert-mcp

Binary Discovery

The package locates the dcert-mcp Rust binary in this order:

  1. DCERT_MCP_BINARY environment variable
  2. Bundled binary in the package bin/ directory
  3. dcert-mcp on PATH (platform wheels install the binary here)
  4. Auto-download from GitHub Releases (universal wheel fallback, with SHA256 verification)

Environment Variables

The proxy forwards these environment variables to the Rust binary:

Category Variables
Proxy HTTP_PROXY, HTTPS_PROXY, NO_PROXY (and lowercase variants)
TLS SSL_CERT_FILE, SSL_CERT_DIR
dcert DCERT_PATH, DCERT_MCP_TIMEOUT, DCERT_MCP_CONNECTION_TIMEOUT, DCERT_MCP_READ_TIMEOUT

Scalability

This package uses the MCP proxy pattern: the Python layer never needs to know about individual dcert tools. All tool discovery, input schemas, and invocations are forwarded to the Rust binary via the MCP protocol at runtime. When new capabilities are added to the Rust server, they are immediately available through the Python wrapper.

License

MIT

Project links

Data verified by PyPI on Jun 29, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (3.0.44)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for sreengineer from gravatar.com sreengineer

Credits

Author: sreengineer

GitHub Statistics

Data verified by PyPI on Jun 29, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

MIT
View SPDX License List

Requires

Python >=3.10

Provides Extra

dev otel

Tags

ai-tools certificate fastmcp mcp model-context-protocol security tls x509

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

dcert-3.0.41-py3-none-win_amd64.whl (10.9 MB view details)

Uploaded Python 3Windows x86-64

dcert-3.0.41-py3-none-manylinux_2_35_x86_64.whl (8.3 MB view details)

Uploaded Python 3manylinux: glibc 2.35+ x86-64

dcert-3.0.41-py3-none-macosx_11_0_arm64.whl (7.5 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

dcert-3.0.41-py3-none-macosx_10_15_x86_64.whl (7.9 MB view details)

Uploaded Python 3macOS 10.15+ x86-64

dcert-3.0.41-py3-none-any.whl (23.8 kB view details)

Uploaded Python 3

File details

Details for the file dcert-3.0.41-py3-none-win_amd64.whl.

File metadata

  • Download URL: dcert-3.0.41-py3-none-win_amd64.whl
  • Upload date:
  • Size: 10.9 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for dcert-3.0.41-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 e246bca8d667d70eb1bcc02680477807185dcb9f6b998c236fef665bcf4e3df2
MD5 84c8f8130ecea2325c26bd068de30cb9
BLAKE2b-256 4bb193c5accf5b46df99a4b4123fed8c1d368043a4ebe2b1a2e2d10daf051f6c

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.41-py3-none-win_amd64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.41-py3-none-manylinux_2_35_x86_64.whl.

File metadata

File hashes

Hashes for dcert-3.0.41-py3-none-manylinux_2_35_x86_64.whl
Algorithm Hash digest
SHA256 5c53df38a917eec892fa870e2b5402a7227916bc0b5f503e29a8ad6e1c8aa3f4
MD5 021340ba65eb84cf33be022fdc899101
BLAKE2b-256 4c2e8624254b11f6fb13976c4c0b173a10ffc9a56475133e283f1379036644d3

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.41-py3-none-manylinux_2_35_x86_64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.41-py3-none-macosx_11_0_arm64.whl.

File metadata

File hashes

Hashes for dcert-3.0.41-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 d8b07bcb95a056c8dc9e30f875a6189ad61aa5429a8ff1290dfbec0e9289f319
MD5 b0a9ebcb165f33be19f7d6934a34715c
BLAKE2b-256 6ac8fe5b2be9249363be2eba1414c496e5dbf9bf9c12fc27d17642a2d969c323

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.41-py3-none-macosx_11_0_arm64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.41-py3-none-macosx_10_15_x86_64.whl.

File metadata

File hashes

Hashes for dcert-3.0.41-py3-none-macosx_10_15_x86_64.whl
Algorithm Hash digest
SHA256 e00ea3d2ed194ccb8baecaecc941b90b5dfb1ea2ec4c2eb8f5490233090f55d0
MD5 88c66643223f10d1adefb129a7a77335
BLAKE2b-256 eb625e61d2b77328288ba304e4a69eedc90b006d0051d3335e1748b62caa7419

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.41-py3-none-macosx_10_15_x86_64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.41-py3-none-any.whl.

File metadata

  • Download URL: dcert-3.0.41-py3-none-any.whl
  • Upload date:
  • Size: 23.8 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for dcert-3.0.41-py3-none-any.whl
Algorithm Hash digest
SHA256 87a6906c3033e22cef5410e78fc24102dc5fea61b3e563fa35e513db83279ea7
MD5 578e481e4f0e13cf2d6025f7bb6f10d3
BLAKE2b-256 f7d2a863dae344ceba9b7fc4fb57d14d8e044d406dfb49d7290a9d2e2e61f7dd

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.41-py3-none-any.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page