# SSLMate Cert Spotter API — how to use (mcp.ai)

Connect your SSLMate Cert Spotter API account and use 9 tools for security and identity straight from your AI agent. Connect with your own API key. Cert Spotter API by SSLMate monitors Certificate Transparency logs to alert users about SSL/TLS certificates issued for their domains, helping detect unauthorized certificates and potential security issues.

## Option A — via MCP (recommended)
Remote MCP endpoint (HTTP, streamable): `https://api.mcp.ai/p_sslmate_cert_spotter_api?ms=1787291340000`
Add it as a custom/remote MCP connector in your client (Claude, Cursor, VS Code…), then authenticate when prompted. Once connected, ask the agent to use the server's tools (e.g. `sslmate_cert_spotter_api_add_monitored_domain`).

## Option B — via direct REST API
Base URL: `https://api.mcp.ai/api/sslmate_cert_spotter_api`
Auth: `Authorization: Bearer sk_live_…` — create a workspace API key at https://mcp.ai/settings/api-keys
Discover endpoints: `GET https://api.mcp.ai/api/sslmate_cert_spotter_api/_endpoints`

### Endpoints
- `POST https://api.mcp.ai/api/sslmate_cert_spotter_api/add/monitored/domain` — Tool to add or update a monitored domain in Cert Spotter. Use when you need to enable monitoring for a new domain or update an existing one. If the domain already exists, omitted fields retain their e
  - body: { name: string, enabled?: boolean }
- `POST https://api.mcp.ai/api/sslmate_cert_spotter_api/authorize/certificate` — Tool to authorize a certificate in Cert Spotter. Use when you need to prevent future notifications for a known certificate. Once authorized, the certificate will not trigger alerts if discovered in Ce
  - body: { tbs_sha256: string }
- `POST https://api.mcp.ai/api/sslmate_cert_spotter_api/authorize/public/key` — Tool to authorize a public key in Cert Spotter. Use when you need to prevent notifications for certificates using a specific public key. Authorizing a key before certificate issuance avoids race condi
  - body: { dns_names: string[], pubkey_sha256: string }
- `POST https://api.mcp.ai/api/sslmate_cert_spotter_api/certspotter/get/event` — Tool to retrieve detailed information about a specific CertSpotter certificate issuance. Use when you need to inspect certificate metadata after confirming an issuance ID.
  - body: { event_id: string, expand_issuer?: boolean, expand_cert_der?: boolean, expand_dns_names?: boolean }
- `POST https://api.mcp.ai/api/sslmate_cert_spotter_api/delete/monitored/domain` — Tool to delete a monitored domain from Cert Spotter. Use when you need to remove a domain from monitoring. Returns success confirmation on deletion (HTTP 204). Returns 404 if domain not found.
  - body: { name: string }
- `POST https://api.mcp.ai/api/sslmate_cert_spotter_api/get/certificate/v2` — Tool to retrieve certificate information by common name (domain). Use when you need to inspect certificate metadata, status, or configuration for a specific domain.
  - body: { common_name: string }
- `POST https://api.mcp.ai/api/sslmate_cert_spotter_api/get/monitored/domain` — Tool to retrieve a specific monitored domain by its name. Use when you need to check the monitoring status of a domain.
  - body: { name: string }
- `POST https://api.mcp.ai/api/sslmate_cert_spotter_api/list/ct/issuances` — Tool to list certificate issuances for a domain from Certificate Transparency logs. Use when you need to discover all unexpired certificates issued for a domain or its subdomains.
  - body: { after?: string, domain: string, expand?: string, match_wildcards?: boolean, include_subdomains?: boolean }
- `POST https://api.mcp.ai/api/sslmate_cert_spotter_api/list/monitored/domains` — Tool to list all monitored domains. Use when you need to audit or review the domains currently monitored by Cert Spotter.

## Example prompts
- "What can I do in SSLMate Cert Spotter API?"
- "Show me a summary of my SSLMate Cert Spotter API account"

## More
- Page: https://mcp.ai/sslmate_cert_spotter_api
- Agent spec (llms.txt): https://mcp.ai/sslmate_cert_spotter_api/llms.txt
- Postman collection: https://mcp.ai/sslmate_cert_spotter_api/postman.json