# SSL Certificate Verification Error with MCP Integration to OpenSearch

**URL:** <https://forum.opensearch.org/t/ssl-certificate-verification-error-with-mcp-integration-to-opensearch/24823>\
**Category:** OpenSearch\
**Created:** [June 18, 2025, 11:15pm UTC](https://forum.opensearch.org/t/ssl-certificate-verification-error-with-mcp-integration-to-opensearch/24823 "2025-06-18T23:15:29Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![cristid9](https://avatars.discourse-cdn.com/v4/letter/c/ccd318/32.png) [@cristid9](https://forum.opensearch.org/u/cristid9)\
**Post date:** [June 18, 2025, 11:15pm UTC](https://forum.opensearch.org/t/ssl-certificate-verification-error-with-mcp-integration-to-opensearch/24823/1 "2025-06-18T23:15:29Z")

</div>

Hi everyone! I’m trying to set up an MCP (Model Context Protocol) integration with Claude to connect to my OpenSearch cluster, but I’m running into SSL certificate issues. **Setup:**

- Configured MCP server to connect Claude to OpenSearch cluster
- OpenSearch running on internal IP: my-ip:31580 (exposed from a kubernetes cluster via a NodePort)
- MCP integration working, but SSL verification failing

Error:

```auto
ConnectionError: HTTPSConnectionPool(host='10.113.61.83', port=31580): Max retries exceeded with url: /_cat/indices?format=json (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1028)')))

```

**Questions:**

1. What’s the proper way to configure SSL settings for MCP connections to OpenSearch?
2. Should I disable SSL verification in the MCP server config for internal clusters?
3. Any specific OpenSearch SSL configuration recommendations for MCP integrations?
4. Has anyone successfully set up MCP with self-signed certificates?

The MCP server itself is running fine - it’s specifically the SSL handshake with OpenSearch that’s failing. Any guidance on the SSL configuration would be super helpful!  
Thanks!

---

<div class="post-metadata">

**Author:** ![Anthony](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/anthony/32/9939_2.png) [@Anthony](https://forum.opensearch.org/u/Anthony)\
**Post date:** [June 19, 2025, 6:12pm UTC](https://forum.opensearch.org/t/ssl-certificate-verification-error-with-mcp-integration-to-opensearch/24823/2 "2025-06-19T18:12:58Z")

</div>

@cristid9 I got similar setup working with OpenAI by passing the root-ca from opensearch. In my case using python script that uses the root-ca to verify the connection. Using self-signed CA. Have you tried to configure this?