CertBridge MCP — Cyan Eclipse Bazaar

Vendor: Cyan Eclipse Technologies · Platforms: MCP over stdio

Certification scope

Test Bench v0.1.0, 2026-10-24, Let's Encrypt STAGING environment: end-to-end staging order, byte-exact challenge placement, staging/production labelling, renewal-due detection, audit completeness — 12 pass, 1 na of 13 checks

What it does

Full ACME (RFC 8555) certificate lifecycle: account, order, authorization
HTTP-01 challenge computation and placement
Finalize orders and download PEM chains (Let's Encrypt primary, ZeroSSL via EAB)
Parse any certificate for expiry and renewal-due status (<=30 days)
Staging always labelled; append-only audit log of every step

Tools

register_accountrequest_certificateget_challengesplace_challengecomplete_validationdownload_certificateinstall_certificatecertificate_statusaudit_log

Problems it addresses

My site's TLS certificate expired and the host wants me to buy paid SSL
I need to issue or renew a Let's Encrypt certificate without the cPanel dashboard
An agent needs to manage SSL certificates and watch for renewal deadlines
AutoSSL is hidden or broken on my shared hosting

Not tested

Auth enforcement (bench U1 = na: local stdio transport has no credential layer to test)
cPanel UAPI install — declared in the server, returns explicit not-live errors; not scored by the bench. Live production issuance itself was proven separately by dogfood (see live_state_note)
Production CA account on the BENCH run (bench created a staging account only); the dogfood run created a production account outside the bench

Bench scorecard: test-bench/results/certbridge-mcp-2026-10-24-2.json

Evaluation-intake listing

This listing records the tool's place in the Bazaar's evaluation and monitoring pipeline, with the evidence gathered so far printed above — verdict, scope, and not-tested items included. It is not sold on this site, and its presence in the catalog is not a claim beyond that evidence. The service behind every verdict is the bench: what a bench run buys →