← All integrations

DigiCert MCP server

663 operations0 webhooks

Manage DigiCert CertCentral, Report Library, Account Manager, Private CA, Trust Lifecycle Manager, and Content Trust API operations.

Try DigiCert with your agent

Connect DigiCert, then paste this into Claude, ChatGPT or Cursor. For ideas from other apps, see the use cases.

Using Corsair, show me what you can do in DigiCert on my account, then run one read-only example and show me the result.

Runs once, when you ask

DigiCert tools and triggers

Tools are what your agent can do in DigiCert through Corsair's MCP server. Triggers are the DigiCert events a routine can start from.

Certcentral Api

  • Account DetailsRead-only

    Account details

    certcentralApi.accountDetails

  • Acme External Account BindingWrite

    ACME External Account Binding

    certcentralApi.acmeExternalAccountBinding

  • Activate ContainerWrite

    Activate container

    certcentralApi.activateContainer

  • Activate DomainWrite

    Activate domain

    certcentralApi.activateDomain

  • Activate Domain LockingWrite

    Activate domain locking

    certcentralApi.activateDomainLocking

  • Activate OrganizationWrite

    Activate organization

    certcentralApi.activateOrganization

  • Add Custom FieldWrite

    Add custom field

    certcentralApi.addCustomField

  • Add DomainWrite

    Add domain

    certcentralApi.addDomain

  • Add Ip RestrictionWrite

    Add IP restriction

    certcentralApi.addIpRestriction

  • Add NoteWrite

    Add note

    certcentralApi.addNote

  • Add Note 504f5354Write

    Add note

    certcentralApi.addNote_504f5354

  • Add Or Remove FundsDestructive

    Add or remove funds

    certcentralApi.addOrRemoveFunds

Connect DigiCert to Claude, ChatGPT or Cursor

  1. 1

    Connect DigiCert in Corsair

    Add your DigiCert API key or sign in with OAuth once in Corsair. Corsair stores the credential encrypted and makes the DigiCert API calls for your agent, so it never goes into a prompt or a config file. Connect DigiCert

    If your link lets the agent add apps, you can skip this: it gives you a sign-in link the first time it needs DigiCert. On a ChatGPT personal plan, connect DigiCert here first.

  2. 2

    Add Corsair's MCP server to your agent

    Every client uses the same address:

    https://mcp.corsair.dev/mcp
    Open Customize → Connectors → Add custom connector, paste the address, then select Connect.

    Codex, Gemini CLI, VS Code, Zed and other clients with OAuth sign-in work the same way. Clients without it, such as GitHub Copilot's coding agent, use a link's own address and an API key. Setup for every client

  3. 3

    Sign in and choose what needs your approval

    Your client opens Corsair to sign in. Pick a link: the apps your agent can use and a mode that decides what it may do without asking. In the default Cautious mode, DigiCert's read and write operations run right away and its 123 destructive operations wait for your approval. Strict mode asks before every write and refuses destructive operations, and Read mode allows reads only.

FAQ

Install corsair and @corsair-dev/digicert, add the DigiCert plugin, and connect with an API key or OAuth. Then call methods like corsair.digicert.api.accountManager.locales() from your app. Corsair stores tokens, and keeps each tenant isolated.

Yes. DigiCert supports an API key or OAuth. Use credentials or OAuth scopes that match what you automate. Create them in the DigiCert developer console, then paste into Corsair or connect through managed auth in Hub.

Yes. One Corsair client can hit DigiCert, GitHub, Notion, Stripe, and the rest. Trigger DigiCert from a webhook, push updates to Slack, or chain actions across plugins. Same tenant context across integrations, plain TypeScript.

Teams use Corsair for manage DigiCert CertCentral, Report Library, Account Manager, Private CA, Trust Lifecycle Manager, and Content Trust API operations. Common builds include sync jobs, admin tooling, and agents that call DigiCert APIs from your backend.

The SDK is open source. Self-host and you pay Corsair nothing for the integration layer. Hub bills for hosted auth and execution, not per DigiCert API call. Hub has a generous free tier. For hobby projects you can probably run the whole thing on free. Paid plans start to matter with more tenants or heavier traffic.

We maintain @corsair-dev/digicert in the open repo. When DigiCert ships API changes, upgrade the package. Your call sites stay typed. You should not need to rewrite the integration layer each time.

No. Corsair does not read your DigiCert data or hold individual access credentials. Credentials stay in your database. API calls run on your instance. We do not store DigiCert data on your behalf.

Yes. Add https://mcp.corsair.dev/mcp as a custom connector or MCP server in Claude, ChatGPT, Cursor, VS Code, Claude Code, Codex or any client that supports remote MCP servers with OAuth sign-in, then sign in to Corsair. On ChatGPT personal plans, custom servers currently get read tools only.

Yes. Put DigiCert on a link in Strict mode and every write waits for your approval, while destructive actions are refused. The default Cautious mode asks only before the 123 destructive DigiCert operations. You can change a link's mode at hub.corsair.dev/me.