dcert (Python)

CI/CD Pipeline PyPI version License: MIT

A Python MCP wrapper for the dcert Rust server.

Uses FastMCP to create a transparent proxy around the dcert-mcp Rust binary, exposing all TLS certificate tools via the Model Context Protocol. New tools added to the Rust binary are automatically available without any Python code changes.

Requirements

  • Python 3.12+
  • The dcert-mcp Rust binary is bundled in platform-specific wheels (no network access needed at runtime)

Installation

pip install dcert

Platform-specific wheels are available for:

  • Linux x86_64 (Ubuntu 22.04+, glibc 2.35+)
  • macOS Intel (x86_64)
  • macOS Apple Silicon (ARM64)

A universal fallback wheel auto-downloads the binary on first use if no platform wheel matches.

Quick Start

As a server

from dcert import create_server

server = create_server()
server.run()  # stdio mode (default)

As a client

import asyncio
from dcert import create_client

async def main():
    async with create_client() as client:
        tools = await client.list_tools()
        print(f"Available tools: {len(tools)}")

        result = await client.call_tool(
            "analyze_certificate", {"target": "example.com"}
        )
        print(result)

asyncio.run(main())

Typed async tool wrappers

For production use with type safety, timeouts, and automatic reconnection:

import asyncio
from dcert.tools import DcertClient

async def main():
    async with DcertClient(timeout=60.0) as dcert:
        # Analyze a certificate
        result = await dcert.analyze_certificate(target="example.com")

        # Check expiry with custom threshold
        expiry = await dcert.check_expiry(target="example.com", days=90)

        # Get TLS connection details
        info = await dcert.tls_connection_info(target="example.com")

        # Export PEM chain
        pem = await dcert.export_pem(target="example.com", output_path="chain.pem")

asyncio.run(main())

All 11 tools are available as typed async methods:

Method Description
analyze_certificate() Decode and analyze TLS certificates
check_expiry() Check certificate expiry within N days
check_revocation() Check OCSP revocation status
compare_certificates() Compare certificates between two targets
tls_connection_info() Get TLS connection details (cipher, protocol, latency)
export_pem() Export certificate chain as PEM
verify_key_match() Verify private key matches a certificate
convert_pfx_to_pem() Convert PKCS12/PFX to PEM files
convert_pem_to_pfx() Convert PEM cert+key to PKCS12/PFX
create_keystore() Create PKCS12 keystore (Java-compatible)
create_truststore() Create PKCS12 truststore from CA certs

Error handling

from dcert.tools import (
    DcertClient,
    DcertError,          # Base exception
    DcertTimeoutError,   # Tool call timed out
    DcertConnectionError,# Subprocess died
    DcertToolError,      # MCP tool returned an error
)

async with DcertClient(timeout=30.0, max_reconnects=3) as dcert:
    try:
        result = await dcert.analyze_certificate(target="example.com")
    except DcertTimeoutError:
        print("Tool call timed out")
    except DcertToolError as e:
        print(f"Tool error: {e} (tool={e.tool})")
    except DcertConnectionError:
        print("Binary subprocess crashed")

CLI

# stdio mode (default, for MCP clients like Claude Code)
dcert-python

# HTTP mode
dcert-python --transport http --host 0.0.0.0 --port 8080

# Pre-download binary (universal wheel only)
dcert-python --setup

# Explicit binary path
dcert-python --binary /usr/local/bin/dcert-mcp

Binary Discovery

The package locates the dcert-mcp Rust binary in this order:

  1. DCERT_MCP_BINARY environment variable
  2. Bundled binary in the package bin/ directory
  3. dcert-mcp on PATH (platform wheels install the binary here)
  4. Auto-download from GitHub Releases (universal wheel fallback, with SHA256 verification)

Environment Variables

The proxy forwards these environment variables to the Rust binary:

Category Variables
Proxy HTTP_PROXY, HTTPS_PROXY, NO_PROXY (and lowercase variants)
TLS SSL_CERT_FILE, SSL_CERT_DIR
dcert DCERT_PATH, DCERT_MCP_TIMEOUT, DCERT_MCP_CONNECTION_TIMEOUT, DCERT_MCP_READ_TIMEOUT

Scalability

This package uses the MCP proxy pattern: the Python layer never needs to know about individual dcert tools. All tool discovery, input schemas, and invocations are forwarded to the Rust binary via the MCP protocol at runtime. When new capabilities are added to the Rust server, they are immediately available through the Python wrapper.

License

MIT

Project links

Data verified by PyPI on Jul 2, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (3.0.44)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for sreengineer from gravatar.com sreengineer

Credits

Author: sreengineer

GitHub Statistics

Data verified by PyPI on Jul 2, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License expression

MIT
View SPDX License List

Requires

Python >=3.10

Provides Extra

dev otel

Tags

ai-tools certificate fastmcp mcp model-context-protocol security tls x509

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

dcert-3.0.43-py3-none-win_amd64.whl (10.9 MB view details)

Uploaded Python 3Windows x86-64

dcert-3.0.43-py3-none-manylinux_2_35_x86_64.whl (8.2 MB view details)

Uploaded Python 3manylinux: glibc 2.35+ x86-64

dcert-3.0.43-py3-none-macosx_11_0_arm64.whl (7.5 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

dcert-3.0.43-py3-none-macosx_10_15_x86_64.whl (7.9 MB view details)

Uploaded Python 3macOS 10.15+ x86-64

dcert-3.0.43-py3-none-any.whl (24.2 kB view details)

Uploaded Python 3

File details

Details for the file dcert-3.0.43-py3-none-win_amd64.whl.

File metadata

  • Download URL: dcert-3.0.43-py3-none-win_amd64.whl
  • Upload date:
  • Size: 10.9 MB
  • Tags: Python 3, Windows x86-64
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for dcert-3.0.43-py3-none-win_amd64.whl
Algorithm Hash digest
SHA256 e15ec3327c3dd5e880c4e1e7ea99b58d63aeed292b4ddf24253cb6d27d3ae18a
MD5 10dd8481b4836fdd571dc8e641af2474
BLAKE2b-256 3bbd57f4fd03909959033435a5bedb50ffe31ce2d8dc77f426b728d1779e869e

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.43-py3-none-win_amd64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.43-py3-none-manylinux_2_35_x86_64.whl.

File metadata

File hashes

Hashes for dcert-3.0.43-py3-none-manylinux_2_35_x86_64.whl
Algorithm Hash digest
SHA256 2d2e85c9bf4b2a44b37502b7e164e521f5ea04b78f6f17dcac1fd3f5e0affaea
MD5 8de7b3b3ae4b040b3bc81633fb273dd8
BLAKE2b-256 b96995ef64924a852cca759d58086df287923896205f23f80f51ec2212a1565e

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.43-py3-none-manylinux_2_35_x86_64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.43-py3-none-macosx_11_0_arm64.whl.

File metadata

File hashes

Hashes for dcert-3.0.43-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 df35b57f231779e61701fa636927576457a60f5b1bb5dcee9cc8aa220a4194d0
MD5 459909acde514206a7839bfb5747b31c
BLAKE2b-256 ef10130501d2e9b38ae81872e86b0ffd2b03679ec6ba83a19d9df878b97d495e

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.43-py3-none-macosx_11_0_arm64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.43-py3-none-macosx_10_15_x86_64.whl.

File metadata

File hashes

Hashes for dcert-3.0.43-py3-none-macosx_10_15_x86_64.whl
Algorithm Hash digest
SHA256 9563dd72973a01daf8b83e02696f907a520ce05af897b571c9b16e09d391592f
MD5 134813155fc1e873a3c8a67c447efd0a
BLAKE2b-256 b9654eb6fd0bf1c773f37edc542324eb764a31ac3b2caaa198aa9a6b4a03cd2e

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.43-py3-none-macosx_10_15_x86_64.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file dcert-3.0.43-py3-none-any.whl.

File metadata

  • Download URL: dcert-3.0.43-py3-none-any.whl
  • Upload date:
  • Size: 24.2 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.12

File hashes

Hashes for dcert-3.0.43-py3-none-any.whl
Algorithm Hash digest
SHA256 d410a5ddb713bac5b67d72e601a723f5e45a17301e9fae9831f606d581fff23c
MD5 6f30d21a93dd49e7d2861608e3d62fc6
BLAKE2b-256 6b9b71c7ef1893a4d58eb3aff0b5a04ed279a57ca47b91d81d207b521edb3027

See more details on using hashes here.

Provenance

The following attestation bundles were made for dcert-3.0.43-py3-none-any.whl:

Publisher: ci.yml on SCGIS-Wales/dcert

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page