For Agents
Discover the available operations on the Microsoft.CertificateRegistration resource provider used by App Service certificates.
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the CertificateRegistrationProvider API Client, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with CertificateRegistrationProvider API Client API.
Enumerate the operations exposed by the Microsoft.CertificateRegistration resource provider
Discover operation IDs that support App Service certificate purchase and validation flows
Query the resource provider against the Azure Resource Manager endpoint
Return operation display names and descriptions for catalogue or documentation generation
GET STARTED
Use for: List every operation registered on the Microsoft.CertificateRegistration provider, Discover what App Service certificate operations are available in my subscription, Retrieve the operation catalogue for certificate registration, Check whether the certificate registration provider is available in this subscription
Not supported: Does not purchase certificates, validate domains, or renew SSL bindings — use only to enumerate operations on the Microsoft.CertificateRegistration provider.
Jentic publishes the only available OpenAPI document for CertificateRegistrationProvider API Client, keeping it validated and agent-ready.
Jentic publishes the only available OpenAPI specification for CertificateRegistrationProvider API Client, keeping it validated and agent-ready. The Microsoft.CertificateRegistration resource provider exposes its operations metadata so callers can enumerate the App Service certificate registration capabilities available in their subscription. It is the discovery surface for the App Service Certificate flow used to purchase, validate, and renew SSL certificates managed by Azure.
Patterns agents use CertificateRegistrationProvider API Client API for, with concrete tasks.
★ Discover App Service certificate operations
Platform engineers call the operations endpoint to enumerate the capabilities of the Microsoft.CertificateRegistration provider before integrating App Service certificates into their tooling. The response feeds into capability matrices and lets automation decide which certificate-management flows are usable.
Call GET /providers/Microsoft.CertificateRegistration/operations and return the list of operation names plus display strings
Capability inventory for App Service certificates
Tooling that catalogues Azure capabilities pulls this operations list to decide whether to surface App Service certificate workflows in self-service portals. It also catches gaps when a provider has not been registered in the subscription, prompting an automated registration step.
Call Operations_List, store the response keyed by subscription, and flag subscriptions where the provider returns an empty operation set
AI agent integration via Jentic
An infrastructure agent uses Jentic to introspect Azure capabilities before attempting any certificate purchase flow. The agent searches Jentic for 'list Azure certificate registration operations', loads the schema, and executes the call. Jentic handles AAD auth so the agent never holds an ARM bearer token directly.
Use Jentic search 'list Azure certificate registration operations' and execute Operations_List against management.azure.com
1 endpoints — jentic publishes the only available openapi specification for certificateregistrationprovider api client, keeping it validated and agent-ready.
METHOD
PATH
DESCRIPTION
/providers/Microsoft.CertificateRegistration/operations
List all operations available on the certificate registration provider
/providers/Microsoft.CertificateRegistration/operations
List all operations available on the certificate registration provider
Three things that make agents converge on Jentic-routed access.
Credential isolation
Azure AD OAuth 2.0 tokens are minted and rotated inside the Jentic vault. Agents receive scoped, short-lived tokens for management.azure.com — client secrets never enter agent context.
Intent-based discovery
Agents search Jentic by intent, e.g. 'list Azure certificate registration operations', and Jentic returns Operations_List with its input schema so the agent calls the right endpoint without browsing ARM docs.
Time to first call
Direct integration: 1 day for AAD auth and ARM connectivity. Through Jentic: under 1 hour — search, load schema, execute.
Alternatives and complements available in the Jentic catalogue.
Azure Certificates API Client
Manages App Service certificate resources at the subscription and resource group level.
Use this client for capability discovery; use Certificates API Client for actual certificate listing and management.
Azure App Service Certificate Orders
Handles purchase and renewal orders for App Service certificates.
Use Certificate Orders to actually buy or renew a certificate; use this client to confirm the provider is registered first.
Azure Key Vault Management
Manages certificates as Key Vault secrets rather than App Service certificate registrations.
Use Key Vault Management for general certificate storage; use the App Service certificate provider for App Service domain workflows.
Specific to using CertificateRegistrationProvider API Client API through Jentic.
Why is there no official OpenAPI spec for CertificateRegistrationProvider API Client?
Microsoft Azure does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call CertificateRegistrationProvider API Client via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.
What authentication does the CertificateRegistrationProvider API Client use?
The API uses Azure Active Directory OAuth 2.0 declared as azure_auth with the implicit flow against management.azure.com. Tokens are presented as Bearer headers. Through Jentic, the AAD client secret stays in the vault and the agent only ever sees scoped, short-lived tokens.
Can I purchase an App Service certificate with this API?
No. This client only exposes the operations metadata for Microsoft.CertificateRegistration. Purchase, domain validation, and renewal of App Service certificates are handled by additional operations under the same resource provider that are not part of this spec.
What are the rate limits for the CertificateRegistrationProvider API Client?
Azure Resource Manager applies subscription-level throttling, typically 12,000 read and 1,200 write requests per hour, surfaced via x-ms-ratelimit-remaining headers. The certificate registration discovery endpoint is read-only and falls under that read budget.
How do I list certificate registration operations through Jentic?
Run pip install jentic, then use the async client to search 'list Azure certificate registration operations', load Operations_List, and execute. Jentic returns the array of operation names registered on the Microsoft.CertificateRegistration provider.
How does this differ from the certificates-api-client?
This client is a discovery surface for the App Service certificate registration provider. The certificates-api-client manages App Service certificate resources directly inside a subscription. Use this for capability discovery and the certificates-api-client to read or list provisioned certificates.