How to check a FIPS 140-3 or Common Criteria certificate in Claude or ChatGPT
Give Claude or ChatGPT live FIPS 140-3 and Common Criteria certification data over MCP. Look up a certificate by number, product or vendor, with status, level, validity dates, lab and related CVEs. No setup.
Add the Security Certifications brain to your AI assistant
Ask a general AI model whether a product is FIPS 140-3 validated and you will often get an answer that is outdated or invented. Certificates are issued, sunset and revoked every week, and a model only knows what it saw in training. The KBrain Security Certifications brain gives Claude and ChatGPT a live source to check instead, built from the sec-certs.org datasets of NIST CMVP and Common Criteria certificates.
What the assistant can look up
- get_certificate: one certificate by FIPS number (e.g. 4282), Common Criteria id (e.g. BSI-DSZ-CC-1091-2018) or KBrain id, with vendor, level or EAL, status, dates, lab, algorithms, related certificates and related CVEs.
- search_certificates: search by product, vendor or category, filtered by scheme, status, level, country, algorithm, post-quantum support, validity on a date, or having related CVEs.
- certificates_for_cve: the certified products that may be affected by a CVE.
- certs_server_status: how many certificates are loaded and when the data was last refreshed.
How to connect it
- Open the Security Certifications Explorer brain on KBrain and add it to your account.
- Add your KBrain MCP endpoint to Claude or ChatGPT as a connector, following the standard MCP setup.
- Ask a certification question. The assistant calls the brain and answers from the current record, with a link to the official certificate.
For the exact connection steps, see the guides on connecting a knowledge base to Claude or ChatGPT via MCP. The certification tools appear next to your other brains, including the CVE brain.
Questions to try
- "Is FIPS certificate 4282 still active, at which level, and when does it sunset?"
- "Find the Common Criteria certificate BSI-DSZ-CC-1091-2018 and summarise what was evaluated."
- "Which FIPS 140-3 validated modules does this vendor hold?"
- "Which certified products may be affected by CVE-2014-0160?"
Certificate data comes from sec-certs.org, built by the Centre for Research on Cryptography and Security (CRoCS) at Masaryk University from NIST CMVP and the Common Criteria Portal. KBrain refreshes it weekly and links it to the CVE brain.
Add the Security Certifications brain to your AI assistant
Check FIPS 140-3 and Common Criteria certificates, post-quantum algorithms, and the CVEs that may affect certified products from Claude, ChatGPT, or any MCP compatible assistant. Hosted and refreshed weekly from sec-certs.org, with nothing to set up.
Questions people ask.
Why can't Claude or ChatGPT check a certificate on their own?
They answer from training data with a cutoff, so they do not know certificates issued, sunset or revoked since. Connecting the Security Certifications brain over MCP replaces that guess with a lookup in the current records.
Is there anything to install or host?
No. The brain is hosted by KBrain and refreshed weekly. You add the MCP connector to your assistant once.
Where does the data come from?
From sec-certs.org, a project of the CRoCS lab at Masaryk University that collects and processes certificates from NIST CMVP (FIPS 140-3 and earlier FIPS 140-2) and the Common Criteria Portal. Every answer names that source and links to the official certificate.
Can I see the same data without an assistant?
Yes. Every certificate has a public page at kbrain.io/certs, with the same facts, related CVEs and links to the official documents.