# Install mkcert Simple tool to make locally trusted development certificates. Version 1.4.4 via Homebrew; verified from local package data. ## Install ```sh sudo av install brew:mkcert ``` ## Agent safety answer mkcert creates local certificate authorities and development certificates. - **Credential access:** Touches local trust stores and private key material. - **Remote mutation:** Primarily mutates local trust state, not remote systems. - **Publish/artifact risk:** Can create certificates that influence development service trust. - **Recommended control:** Gate CA installation and private-key handling. - **Agent-use guidance:** Allow certificate inspection; require approval before installing trust roots or writing private keys. Additional install commands: ### macOS - Homebrew (100%): ```sh brew install mkcert ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install mkcert ``` Evidence: MacPorts ports tree: security/mkcert/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add mkcert ``` Evidence: Alpine Linux edge package indexes: mkcert from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install mkcert ``` Evidence: Debian stable package indexes: mkcert from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install mkcert ``` Evidence: Fedora Rawhide package metadata: mkcert from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#mkcert ``` Evidence: nixpkgs package indexes: pkgs/by-name/mk/mkcert/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S mkcert ``` Evidence: Arch Linux sync databases: mkcert from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install mkcert ``` Evidence: openSUSE Tumbleweed package metadata: mkcert from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install mkcert ``` Evidence: Chocolatey community package catalog: mkcert from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','mitelconnect' - Scoop (92%): ```sh scoop install extras/mkcert ``` Evidence: Scoop official bucket manifest trees: bucket/mkcert.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id FiloSottile.mkcert -e ``` Evidence: Windows Package Manager source index: FiloSottile.mkcert from https://cdn.winget.microsoft.com/cache/source.msix ## Package Facts - **Package key:** brew:mkcert - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 1.4.4 - **Source summary:** Simple tool to make locally trusted development certificates - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** BSD-3-Clause - **Source archive:** - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - mkcert (cli) - mkcert (alias) ## Build Dependencies - go ## Install Behavior - Post-install hook: not defined - Bottle: available on arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura ## Freshness - Page generated: 2026-06-10 - Package-manager version: 1.4.4 - Local data status: ok - Upstream repository: https://github.com/FiloSottile/mkcert - Upstream latest detected: v1.4.4 (current) - info: No package-manager update timestamp was available. ## Sicherheitshinweise narrow executable package without higher-risk signals. - **Protected-tool coverage:** Plain Text Root CA Private Key - **Geiger risk:** green / low - narrow executable package without higher-risk signals - **Approval gate rules:** 4 ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** mkcert - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - mkcert - 1.4.4-1+b18: normalized package name match | Debian stable package indexes: mkcert from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Simple zero-config tool to make locally trusted certificates | https://github.com/FiloSottile/mkcert - Nix - mkcert: normalized package name match | nixpkgs package indexes: pkgs/by-name/mk/mkcert/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - mkcert - 1.4.4-1ubuntu2: normalized package name match | Ubuntu 24.04 LTS package indexes: mkcert from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Simple zero-config tool to make locally trusted certificates | https://github.com/FiloSottile/mkcert - apk - mkcert - 1.4.4-r29: normalized package name match | Alpine Linux edge package indexes: mkcert from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | simple zero-config tool to make locally trusted development certificates with any names you'd like | https://mkcert.dev/ - dnf - mkcert - 1.4.4-9.fc45: normalized package name match | Fedora Rawhide package metadata: mkcert from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Make and install locally trusted development certificates | https://github.com/FiloSottile/mkcert - pacman - mkcert - 1.4.4-3: normalized package name match | Arch Linux sync databases: mkcert from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Simple tool for making locally-trusted development certificates | https://github.com/FiloSottile/mkcert - zypper - mkcert - 1.4.4-1.4: normalized package name match | openSUSE Tumbleweed package metadata: mkcert from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst | CLI tool for making locally-trusted development certificates | https://github.com/FiloSottile/mkcert - MacPorts - mkcert: normalized package name match | MacPorts ports tree: security/mkcert/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 - Chocolatey - mkcert: normalized package name match | Chocolatey community package catalog: mkcert from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','mitelconnect' - Scoop - extras/mkcert: normalized package name match | Scoop official bucket manifest trees: bucket/mkcert.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1 - winget - FiloSottile.mkcert: normalized package name match | Windows Package Manager source index: FiloSottile.mkcert from https://cdn.winget.microsoft.com/cache/source.msix ## Related Links - [Source-control packages](https://www.automicvault.com/de/pkg/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://www.automicvault.com/de/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/de/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Developer build packages](https://www.automicvault.com/de/pkg/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata. - [go](https://www.automicvault.com/de/pkg/brew/go/) - Build dependency declared by Homebrew. - [certbot](https://www.automicvault.com/de/pkg/brew/certbot/) - Shares av.db curated category or tags: certificates, cli, https, security, tls. - [showcert](https://www.automicvault.com/de/pkg/brew/showcert/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [certigo](https://www.automicvault.com/de/pkg/brew/certigo/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [crip](https://www.automicvault.com/de/pkg/brew/crip/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [minica](https://www.automicvault.com/de/pkg/brew/minica/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [certstrap](https://www.automicvault.com/de/pkg/brew/certstrap/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [certgraph](https://www.automicvault.com/de/pkg/brew/certgraph/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [lego](https://www.automicvault.com/de/pkg/brew/lego/) - Shares av.db curated category or tags: certificates, cli, security. ## Sources - Nucleus package database - Geiger risk classifier - secret-handling manifest - local coverage README - approval-gate seed metadata - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer