tlsScan

What tlsScan does on Mcp

AI agents call tlsScan to retrieve information from Mcp without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Parameters from the server's own tool schema.

Why tlsScan is rated Low

This tool performs passive reconnaissance by querying and analyzing TLS/SSL certificate and configuration data from a domain. It retrieves information about security settings (certificate validity, cipher suites, protocol versions, etc.) without side effects, making network requests to inspect existing infrastructure. No data is created, modified, deleted, or executed—only read and analyzed.

From the tool's definition Tool name 'tlsScan' and description 'Scan TLS/SSL configuration of a domain' indicate data retrieval and inspection of SSL/TLS settings without modifying, executing code, or triggering destructive actions.

Risk signalsAccepts URL/endpoint input (url)

The rule that runs tlsScan safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mcp, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For tlsScan, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "tlsScan": {}
  }
}

Questions about tlsScan