cert-central

name

cert-central

description

CertCentral is DigiCert’s platform for managing digital certificates and related public key infrastructure workflows, helping organizations issue, monitor, and automate certificate lifecycle operations for websites, applications, and connected systems. Read and write CertCentral data through One: certificateorders, certificate, scan, domain, user, reports and more, 360 actions with real parameter documentation. Use whenever the user asks to look something up in CertCentral, create or update a record there, or build code against the CertCentral API.

CertCentral through One

CertCentral is DigiCert’s platform for managing digital certificates and related public key infrastructure workflows, helping organizations issue, monitor, and automate certificate lifecycle operations for websites, applications, and connected systems.

One exposes CertCentral through four MCP tools. The table below carries real action ids from One's knowledge base, so for a common operation you can skip search and go straight to reading the action's parameters.

How to run an action

1. Find the action in the table below, or call search_one_platform_actions with platform cert-central if it is not listed.
2. Call get_one_action_knowledge with the action id. Do this every time, including for actions in this table. The table gives you the id, not the parameters.
3. Call execute_one_action with parameters copied from that knowledge.

Never guess a parameter name, a body field, or an enum value. The knowledge has the real schema, and a guessed field is either a 400 or a silent write of the wrong thing.

Before you start

Call list_one_integrations once and confirm CertCentral is connected. If it is missing, the user has not connected it: say so and point them at https://app.withone.ai rather than reaching for raw HTTP.

Each connection carries an access field. If it reports {"policy": "methods", "methods": ["GET"]} the agent is read-only here, so plan a read-only answer instead of attempting a write that will be refused.

Before a write

Creates, updates, deletes and sends land on a real CertCentral account and cannot be recalled. State the action and the specific target in one line before the first write in a task, and let the user stop you. Reads need no confirmation.

Actions

CertificateOrders

Action	Method	Path	Action id
List Certificate Orders	GET	/services/v2/order/certificate	conn_mod_def::GMZmRoxZf0s::ZycQcPc-S2Ofyoo6fnTyCg
View Signature Units for a Certificate Order	GET	/services/v2/order/certificate/{{orderId}}/signature-unit	conn_mod_def::GMZmTuU72VM::7WONBfjqQICSL13hT9U8-Q
Change CT Status for a Certificate Order	PUT	/services/v2/order/certificate/{{orderId}}/ct-status	conn_mod_def::GMZmQ2JjJcw::Ys8vgbq-T_qiRwFcOPBmQw
Change DCV Method for a Certificate Order	PUT	/services/v2/order/certificate/{{orderId}}/dcv-method	conn_mod_def::GMZmQ85z-pQ::en8bnhS0Tf2rnVuwXXYqFw
Delete a Custom Renewal Message for a Certificate Order	DELETE	/services/v2/order/certificate/{{orderId}}/custom-renewal-message	conn_mod_def::GMZmQ9xcPnI::Sc0C9R43Soaf_KroiTGn_w
Email a Certificate Order's Site Seal	POST	/services/v2/order/certificate/{{orderId}}/site-seal/email-seal	conn_mod_def::GMZmRfC24GQ::iSpSWrTiRDqLTo4Hmg9O9g
Generate DCV Random Value for a Certificate Order	PUT	/services/v2/order/certificate/{{orderId}}/dcv-random-value	conn_mod_def::GMZmRH8WYUM::zdCgemuKQdeXcENjxgu3MQ
Order a Secure Site EV Certificate	POST	/services/v2/order/certificate/ssl_ev_securesite_flex	conn_mod_def::GMZmSwdXDhc::CLNXFA1XQsOrcYfM2n4PDQ
Order a Secure Site OV Certificate	POST	/services/v2/order/certificate/ssl_securesite_flex	conn_mod_def::GMZmSwsd-LU::S_13u0lUQNugiCAqTTn6Xg
Order Basic EV SSL Certificate	POST	/services/v2/order/certificate/ssl_ev_basic	conn_mod_def::GMZmRwVK_9c::b-gT4XtgRS6QnS6AS0LaHg

6 more CertificateOrders actions are available through search.

Certificate

Action	Method	Path	Action id
Download a Certificate	GET	/services/v2/certificate/{{certificateId}}/download/platform	conn_mod_def::GMZmKNpJIEo::0Ei_DhTVTS6JETg58cMGHA
Download a Certificate for an Order	GET	/services/v2/certificate/download/order/{{orderId}}	conn_mod_def::GMZmKOkl2G8::vrukx2KOTEK6RVlQh9D_Cg
Download Certificate	GET	/apicontroller/v1/certificate/download	conn_mod_def::GMZmKQLPEjI::PxfbASN7T6yQrTYHjwd11A
Download Certificate by Format	GET	/services/v2/certificate/{{certificateId}}/download/format/{{formatType}}	conn_mod_def::GMZmKXIxekc::urNcJmS0QmuKcuESlTugkA
Download Certificate by Format for an Order	GET	/services/v2/certificate/download/order/{{orderId}}/format/{{formatType}}	conn_mod_def::GMZmKXP-5z8::S_DGUUrbSHmGmfTjNNoKFg
Archive a Certificate	PUT	/services/v2/certificate/{{certificateId}}/archive	conn_mod_def::GMZmKGocEd8::60J9wzudQV2gOQoPPpzhqQ
Delete Certificate	POST	/apicontroller/v1/certificate/delete	conn_mod_def::GMZmKPHifdw::7lrAwm4JRBuo-9zICF6oYg
Duplicate a Certificate for an Order	POST	/services/v2/order/certificate/{{orderId}}/duplicate	conn_mod_def::GMZmQ8zxgYA::yTpBg6HKTziya1z4SC9zzA
Restore a Certificate	PUT	/services/v2/certificate/{{certificateId}}/unarchive	conn_mod_def::GMZmKfc9ZCk::hZbr78ITT1C2wOsSC3aQhw
Revoke a Certificate	PUT	/services/v2/certificate/{{certificateIdentifier}}/revoke	conn_mod_def::GMZmKhRGS3o::fJ_7h8lmQEe7nDZzhMMsnw
Send Email for a Certificate	PUT

Scan

Action	Method	Path	Action id
Abort Scan	POST	/apicontroller/v1/scan/abort	conn_mod_def::GMZmVPHwP9g::hhs8JJuzSTOtJf8KDgLAgw
Create Scan	POST	/apicontroller/v1/scan/create	conn_mod_def::GMZmVR04Iy0::VPJb3pBBSF6AMXo-urDnEA
Delete Future Job Using Scan	POST	/apicontroller/v1/scan/deleteFutureJob	conn_mod_def::GMZmVaQFoIs::nQ4OzVxCQsuHs-ID2BfPVQ
Delete Scan	POST	/apicontroller/v1/scan/delete	conn_mod_def::GMZmVY_XJgU::L_iYLpzhR8KfA6DbR6ARyA
Filter Scan	POST	/apicontroller/v1/scan/filter	conn_mod_def::GMZmVhGKnMo::iY7kmKazSvCCFddksuRVDg
Get Subdomains from a Scan	POST	/apicontroller/v1/scan/getSubdomains	conn_mod_def::GMZmVoOzZP0::287VkHdLT62LUijePwLEcg
Reinstate a Scan	POST	/apicontroller/v1/scan/reinstate	conn_mod_def::GMZmVv1UUWA::8loSjShKRiitJK2iXQ9xpQ
Remove Jobs for a Scan	POST	/apicontroller/v1/scan/removeJobs	conn_mod_def::GMZmVvzvdVc::MpBn-STySPWbJsBwtfxL4g
Restore Jobs Using Scan	POST	/apicontroller/v1/scan/restoreJobs	conn_mod_def::GMZmVv9xgzQ::_wj0fn0BRDeUJVcar-C04Q
Suspend Scan	POST	/apicontroller/v1/scan/suspend	conn_mod_def::GMZmVvZQgAU::qMni8Kj6T3WSIgu2KDOpqg
Update a Scan	POST	/apicontroller/v1/scan/update	conn_mod_def::GMZmV3oo7zc::z5Z8NP-MSf2IwoMfQfnuzg

Domain

Action	Method	Path	Action id
Activate a Domain	PUT	/services/v2/domain/{{domainId}}/activate	conn_mod_def::GMZmLfUPKL4::x1GhIyDDRBG0U8TNzdDtLg
Activate Domain Locking for a Domain	PUT	/services/v2/domain/{{domainId}}/activate-domain-locking	conn_mod_def::GMZmLfjpGGM::2s4Sa-2WQraFL-mlJl8jsg
Add a Domain	POST	/services/v2/domain	conn_mod_def::GMZmLhC6N5g::237KNCO0QT6dMMIOZIsC8g
Change DCV Method for a Domain	PUT	/services/v2/domain/{{domainId}}/dcv/method	conn_mod_def::GMZmLiaFG2s::MfFtQaw9TkqCicsqQQjV2A
Check CAA for a Domain	PUT	/services/v2/domain/{{domainId}}/caa	conn_mod_def::GMZmLiDkNgo::nXEVbkbuQqqkBmiZ99YG1Q
Deactivate a Domain	PUT	/services/v2/domain/{{domainId}}/deactivate	conn_mod_def::GMZmLpk_1WY::hOAuxew4SA-imr4aLPmHhA
Deactivate Domain Locking for a Domain	PUT	/services/v2/domain/{{domainId}}/deactivate-domain-locking	conn_mod_def::GMZmLpMO7fM::T6cP7NseRg2STuYhcahnbw
Delete a Domain	DELETE	/services/v2/domain/{{domainId}}	conn_mod_def::GMZmLpOQKhs::fdLBcntST3CzhbwdugK05Q
Resend DCV Emails for a Domain	PUT	/services/v2/domain/{{domainId}}/dcv/emails	conn_mod_def::GMZmP52XFb8::j5lwllPGTMuIG_GvH48-mQ
Validate a Domain's DCV Token	PUT	/services/v2/domain/{{domainId}}/dcv/validate-token	conn_mod_def::GMZmL4tx1uM::rutQ-LbuSwqsgVfJlZ2XCQ

User

Action	Method	Path	Action id
Get a User	GET	/services/v2/user/{{userId}}	conn_mod_def::GMZmWpfl8aw::_3ujZEWETn2mjoZMTjdngw
Resend Create Email for a User	GET	/services/v2/user/{{userId}}/resend-create-email	conn_mod_def::GMZmWpHtovM::oul_JTEmRe2hWww1V5c1LQ
Add a Service User	POST	/services/v2/user	conn_mod_def::GMZmWXNJWAg::JJrna-bsQvSEFmA9cfmwHw
Change a User Role	PUT	/services/v2/user/{{userId}}/role	conn_mod_def::GMZmWfPjmxk::vpjwsM6tQWuf5JLIbE542w
Create a User	POST	/services/v2/user	conn_mod_def::GMZmWXaqqRk::NTWCp9vdTGWlGuUHLsxIbw
Delete a User	DELETE	/services/v2/user/{{userId}}	conn_mod_def::GMZmWiUOAE0::zY92zJxfTMSk7P9XZOVidw
Edit a Service User	PUT	/services/v2/user/{{userId}}	conn_mod_def::GMZmWgYvGks::pP-5ckIUTP-j4FwVgjXNqg
Edit a User	PUT	/services/v2/user/{{userId}}	conn_mod_def::GMZmWfL1GpA::jQ5eIh9rSxKMQAffM37AXQ

Reports

Action	Method	Path	Action id
Download a Report Run	GET	/reports/v1/report/{{reportIdentifier}}/{{reportRunIdentifier}}#download	conn_mod_def::GMZmUl-T2pM::c-Zs-PVbTU-iw8YpAcDBOg
Get JSON Report	GET	/reports/v1/report/{{reportIdentifier}}/{{reportRunIdentifier}}/json	conn_mod_def::GMZmUyTwAJs::k-f5CCxbSA-WMrm-hAsLxg
Create Report	POST	/reports/v1/report	conn_mod_def::GMZmUcoGdbE::26ck0REMS36mF4tQWdRhDA
Delete a Report	DELETE	/reports/v1/report/{{reportIdentifier}}	conn_mod_def::GMZmUkKcuxg::0RA9Ube4T4Kf33rvRDC4CA
Delete Endpoints	POST	/apicontroller/v1/reports/delete	conn_mod_def::GMZmVF5VnJs::azKUu4lZSLuXvMxtneujzQ
Edit a Report	PUT	/reports/v1/report/{{reportIdentifier}}	conn_mod_def::GMZmUog7wzg::rlVBv1xLQjyMgpKYglXtfQ
Filter Report Values Using Apicontroller Reports	POST	/apicontroller/v1/reports/filter	conn_mod_def::GMZmVFzx65o::OE8htj2nShubDeiTZ3r_KA

Sensor

Action	Method	Path	Action id
Reinstate Sensor	POST	/apicontroller/v1/sensor/reinstate	conn_mod_def::GMZmV4ewjAo::4Puw-TyqSw6RFw_pNP9viQ
Stop Debug for a Sensor	POST	/apicontroller/v1/sensor/stopDebug	conn_mod_def::GMZmWCiMkY4::ZXyeilN7S4CqYvF9WZY-UQ
Suspend Sensor	POST	/apicontroller/v1/sensor/suspend	conn_mod_def::GMZmWAT3EsE::CLzQGtoHReKX2bvpCMg8jQ
Update Advanced Settings for a Sensor	POST	/apicontroller/v1/sensor/updateAdvancedSettings	conn_mod_def::GMZmWBZDv68::vOVgAJYMSsOUB3QQij6CzA
Update Sensor Details	POST	/apicontroller/v1/sensor/updateSensorDetails	conn_mod_def::GMZmWKclRYk::TpZ4XswBQRqqYAn5sdGBPQ
Upgrade Sensor	POST	/apicontroller/v1/sensor/upgradeSensor	conn_mod_def::GMZmWJnoDao::5a0jJQXAQByyTT_NAm4Q5w
Void Sensor	POST	/apicontroller/v1/sensor/void	conn_mod_def::GMZmWJHzZXs::28DccMiMRcWw_DMGazo8UA

Webhook

Action	Method	Path	Action id
Activate a Webhook	PUT	/services/v2/webhook/{{webhookId}}/activate	conn_mod_def::GMZmXfs1SL4::NcYRlJRuR9-erXgof934Ag
Check Challenge Using Services v2 Webhook	PUT	/services/v2/webhook/{{webhookId}}/check-challenge	conn_mod_def::GMZmXx0HJ48::AraIx9hXSxCkcUc-CmZMxg
Create Webhook	POST	/services/v2/webhook	conn_mod_def::GMZmXgXxKnE::-OEJnSGqSDWgdlf7sbnTkQ
Deactivate a Webhook	PUT	/services/v2/webhook/{{webhookId}}/deactivate	conn_mod_def::GMZmXgrddHM::MYsBJAv_TqWV5hyjq7P5MA
Send Challenge Using Webhook	PUT	/services/v2/webhook/{{webhookId}}/send-challenge	conn_mod_def::GMZmXy3G9xY::YjJorPW6QO2nHVhDTWYwlw
Send Test Event to a Webhook Endpoint	POST	/services/v2/webhook/test-endpoint	conn_mod_def::GMZmXyTj1yA::fhfXCdGNTUiOBeoqSiVl3w
Update a Webhook Endpoint	PUT	/services/v2/webhook/{{webhookId}}	conn_mod_def::GMZmXxuYvG4::0swy4tuJRQ2VMTHSwfHXjg

Container

Action	Method	Path	Action id
Get Container Info	GET	/services/v2/container/{{containerId}}	conn_mod_def::GMZmK1TNvec::LkUYAT0kRX-tSqoK1-qq5A
Activate a Container	PUT	/services/v2/container/{{containerId}}/activate	conn_mod_def::GMZmKoSyK4I::Se_6Ted8T1WkmPAwSWA16A
Create a Child Container	POST	/services/v2/container/{{containerId}}/children	conn_mod_def::GMZmK1vh0TE::SWKmVrEfQjeyKeVWX4Hcdw
Deactivate a Container	PUT	/services/v2/container/{{containerId}}/deactivate	conn_mod_def::GMZmK0JgeUY::jizXqgFTTWehlDJFZi4NYg
Edit a Container	PUT	/services/v2/container/{{containerId}}	conn_mod_def::GMZmK0py_XA::Y8O6q4oSSnqkGP1BhvVtfw
Update Allowed Domains for a Container	PUT	/services/v2/container/{{containerId}}/allowed-domain-names	conn_mod_def::GMZmLE7PKV4::8MPc8RuwRH-atc-4MFwoBg

AccountMetadata

Action	Method	Path	Action id
List Custom Fields for an Account	GET	/services/v2/account/metadata	conn_mod_def::GMZmI5X_lIU::qIwfGDuDQbGhdzMaUwZNQw
Add a Custom Field to the Account	POST	/services/v2/account/metadata	conn_mod_def::GMZmIg8uahg::1N4YLiyETOmPrwOPdA4v3g
Bulk Add Fields for Account Metadata	POST	/services/v2/account/metadata/bulk	conn_mod_def::GMZmIpY4KXw::huTTDqH_QPiC34nmVCBZ4w
Delete Account Metadata	DELETE	/services/v2/account/metadata/{{metadataId}}	conn_mod_def::GMZmIw1ibPQ::_aYc5MYfR4SZWpBzWmFduA
Edit a Custom Account Metadata Field	PUT	/services/v2/account/metadata/{{metadataId}}	conn_mod_def::GMZmIxE8MtE::5aZn2sP5QjaUPn4hZVlcxQ

CertificateOrder

Action	Method	Path	Action id
Get Certificate Order Info	GET	/services/v2/order/certificate/{{orderId}}	conn_mod_def::GMZmSLBC_wk::ZCRsqV4_SQOziptSGgmwyg
Delete a Certificate Order	DELETE	/services/v2/order/certificate/{{orderId}}	conn_mod_def::GMZmQ_-X3zU::iycF6BSdSd6sgHM943a0LA
Pkio Organisation Person Certificate Order	POST	/services/v2/order/certificate/pkio_organisation_person	conn_mod_def::GMZmSUNHWWY::UoedQopiTqWht64zxXHXWg
Reissue a Certificate for a Certificate Order	POST	/services/v2/order/certificate/{{orderId}}/reissue	conn_mod_def::GMZmTLyu_VE::yBmQ8wu2RhO7R1ZrG8ftdg
Update Auto-Reissue Settings for a Certificate Order	PUT	/services/v2/order/certificate/{{orderId}}/auto-reissue	conn_mod_def::GMZmTVNAAFE::EjpoaLyVQACM6ctvS2iVDQ

Organization

Action	Method	Path	Action id
Get an Organization	GET	/services/v2/organization/{{organizationId}}	conn_mod_def::GMZmUCdmIrg::Psas5bkcQ4WpmUhnwVPUUg

4 more Organization actions are available through search.

This lists 90 of 360 actions. For anything not here, call search_one_platform_actions with platform cert-central. The full catalog is at https://www.withone.ai/knowledge/cert-central.

When a call fails

The error comes from CertCentral, not from One. A 400 or 422 means your parameters do not match the schema, so re-read the knowledge and fix the field. A 401 or 403 means the connection needs re-authorizing, which no retry will fix. A 404 means the id is not on this account. A 429 means slow down. Never retry a write more than once: the first attempt may have landed.

Full catalog: https://www.withone.ai/knowledge/cert-central

Integration knowledge by One (withone.ai), licensed under One-Knowledge-1.0. Attribution must be preserved in derivative works.