MCP tool · SSL, backups, cron & logs
manage_ssl
Manage a domain's ssl/tls configuration — one tool, several actions.
manage_ssl
Description
Manage a domain's ssl/tls configuration — one tool, several actions. action=install installs a certificate you already hold (needs certificate and private_key, optional ca_bundle); action=delete removes the per-domain certificate and reverts to the shared server certificate; action=ca-bundle sets the CA chain (needs ca_bundle); action=auto-renew disables Let's Encrypt auto-renewal (enabled=false); action=force-https turns the HTTP→HTTPS redirect on/off (enabled); action=hsts sets HSTS (enabled, max_age). This does not issue a certificate — for a free Let's Encrypt certificate use request_ssl_certificate; to read the current certificate (issuer, expiry, coverage) use get_ssl_status. install applies immediately and replaces the certificate currently served.
Input
| Name | Type | Description |
|---|---|---|
input
required
|
string |
A domain, email address, website URL, numeric service id, or hosting-account username the customer actually owns. Resolved to the owning account automatically; the resolved target is echoed back in the response.
|
action
required
|
enum |
Which change to make: install, delete, ca-bundle, auto-renew, force-https, or hsts. delete and hsts return a confirmation URL; the rest apply immediately. One of install, delete, ca-bundle, auto-renew, force-https, hsts.
|
certificate
|
string |
For install: the pem leaf certificate (-----begin certificate-----…).
|
private_key
|
string |
For install: the pem private key that matches certificate. Never stored, logged or returned.
|
ca_bundle
|
string |
For install (optional) or ca-bundle (required): the pem CA root/intermediate chain.
|
enabled
|
boolean |
For force-https, hsts, auto-renew: true to enable, false to disable. Note: auto-renew supports only false (disable) — re-enable by reissuing with request_ssl_certificate.
|
max_age
|
integer |
For hsts: the max-age in seconds (default 31536000). 0 clears it.
|
include_subdomains
|
boolean |
For hsts: also apply to every subdomain.
|
attempt_key
|
string |
Optional idempotency key for the confirmation-tier actions (delete, hsts): reuse the same value to re-fetch an existing hold instead of creating a second one.
|