canonical: https://jentic.com/apis/azure.com/website-management-client

# Microsoft Azure WebSite Management Client

The Azure WebSite Management Client is the original 2015-era management plane covering Azure Websites, App Service domain registration, and certificate orders through Azure Resource Manager. It exposes 295 operations across 213 resource paths, including site creation and lifecycle, app settings, source control configuration, custom domain registration, top-level domain lookups, domain recommendations, certificate orders, and certificate validation. Use it where existing automation targets the 2015-08-01 API version, or where domain and certificate registration flows must be scripted alongside site management.

## For AI agents

Manage Azure App Service sites, register App Service domains, and order SSL certificates through the 2015-08-01 Azure Resource Manager surface.

## Scope

Does not handle App Service Plans, application code deployment, or non-App-Service domain registrars - use for App Service site, domain, and certificate management only.

## Capabilities

- Provision and configure Azure App Service websites under a resource group
- Check domain availability, list top-level domains, and register App Service domains
- Order, validate, and manage App Service certificates for use as SSL bindings
- Configure publishing users and source control providers for continuous deployment
- Generate SSO requests against the App Service domain registration provider for partner flows
- List domain recommendations to help users pick a brandable domain at registration time

## Use cases

### Domain registration workflow

Run a full App Service domain registration flow from inside automation: check availability, list recommendations, register the domain, and confirm the order. The DomainRegistration endpoints expose every step so an agent can take a user from a search query to a registered domain without a portal session.

Example prompt: Check availability of contoso-shop.com via checkDomainAvailability and, if free, register it in resource group prod-rg with default contact information.

### SSL certificate ordering for App Service

Order an App Service certificate through the CertificateRegistration provider, validate the registration information, and prepare it for binding to a website. The validateCertificateRegistrationInformation and certificateOrders endpoints make it possible to script SSL procurement so production sites get HTTPS without manual portal steps.

Example prompt: Validate certificate registration information for contoso-shop.com and place a one-year App Service certificate order in resource group prod-rg.

### Legacy site automation against 2015-08-01

Maintain existing infrastructure-as-code that targets the 2015-08-01 API version of WebSite Management. Many older Azure environments still pin to this version; the API exposes 295 operations covering sites, slots, configuration, and source control so automation can stay on a stable, well-defined surface.

Example prompt: List all websites in subscription 00000000-0000-0000-0000-000000000000 and report which ones still target the 2015-08-01 API version.

### Agent-driven onboarding for new web apps

Let an AI agent take a user request like 'spin up my new product site' and orchestrate domain selection, registration, certificate ordering, and site creation as a single workflow through Jentic. The breadth of WebSite Management Client makes it possible to drive the whole onboarding end to end from one tool surface.

Example prompt: Search Jentic for 'check azure app service domain availability', load the schema, and execute it for contoso-shop.com on behalf of the user.

## Key endpoints

| Method | Path | Description |
| --- | --- | --- |
| POST | /subscriptions/{subscriptionId}/providers/Microsoft.DomainRegistration/checkDomainAvailability | Check whether a domain is available |
| POST | /subscriptions/{subscriptionId}/providers/Microsoft.DomainRegistration/listDomainRecommendations | Get domain recommendations |
| GET | /subscriptions/{subscriptionId}/providers/Microsoft.DomainRegistration/topLevelDomains | List supported top-level domains |
| GET | /subscriptions/{subscriptionId}/providers/Microsoft.DomainRegistration/domains | List domains in a subscription |
| GET | /subscriptions/{subscriptionId}/providers/Microsoft.CertificateRegistration/certificateOrders | List App Service certificate orders |
| POST | /subscriptions/{subscriptionId}/providers/Microsoft.CertificateRegistration/validateCertificateRegistrationInformation | Validate certificate registration information |
| GET | /providers/Microsoft.Web/sourcecontrols | List supported source control providers |

## Key resources

- **Sites** — Manage Azure App Service websites
- **Domains** — Register and manage App Service domains
- **TopLevelDomains** — Enumerate available top-level domains
- **CertificateOrders** — Order and manage App Service SSL certificates
- **PublishingUsers** — Configure the deployment publishing user
- **SourceControls** — Configure GitHub, Bitbucket and other source control providers

## Why Jentic

- **Setup:** Managing App Service domains and certificates by hand means acquiring Azure Active Directory OAuth 2.0 tokens, targeting the management.azure.com ARM control plane, and finding the right call across Microsoft.DomainRegistration, Microsoft.CertificateRegistration, and Microsoft.Web paths yourself. Through Jentic you install once, import Website Management Client from the API Directory, store the Azure AD credential once, and your agent calls it.
- **Permission scoping:** This API carries the subscription and resource group in the URL path and names domains, certificate orders, and sites as path segments, so a rule can pin your agent to one subscription or resource group and nothing else. You choose the operations it may call, so buying a domain or deleting a certificate order is not included unless you add it.
- **Credential handling:** Your Azure AD token is stored once, encrypted, by your own Jentic One instance and injected at execution time. It never enters the agent's prompt, logs, or context.
- **Discovery method:** Agents search Jentic by intent such as 'check App Service domain availability' or 'list certificate orders', and Jentic returns the matching operation with its input schema so the agent calls the right ARM endpoint without browsing Microsoft docs.

## Related APIs

- **WebApps API Client** — Newer 2018-11-01 management surface for App Service sites
- **App Service Certificate Orders API Client** — Dedicated certificate order management for App Service
- **App Service Plans API Client** — Manage the App Service plans that host websites

## FAQ

### What authentication does the WebSite Management Client use?

The API uses Azure Active Directory OAuth 2.0 via the implicit flow scheme `azure_auth`, scoped to user_impersonation against https://management.azure.com. Through Jentic the OAuth token stays in the vault and only short-lived scoped bearer tokens are exposed to the agent.

### Can I register a domain with this API?

Yes. The DomainRegistration provider exposes /subscriptions/{subscriptionId}/providers/Microsoft.DomainRegistration/domains for registering and managing App Service domains, with checkDomainAvailability and listDomainRecommendations to support the registration flow.

### What are the rate limits for this API?

The spec does not declare explicit rate limits. Calls go through Azure Resource Manager, which applies standard ARM throttling per subscription. Use the x-ms-ratelimit-remaining-subscription-* response headers to monitor remaining quota.

### How do I check domain availability through Jentic?

Search Jentic for 'check azure app service domain availability', load the schema for POST /subscriptions/{subscriptionId}/providers/Microsoft.DomainRegistration/checkDomainAvailability, and execute it with the candidate domain name. Install with `pip install jentic` and use the async search/load/execute pattern.

### Should I use this API or the newer WebApps API?

Use the newer webapps-api-client (2018-11-01) for current site management. Use this 2015-08-01 WebSite Management Client when you need domain registration and certificate ordering, or when existing automation is pinned to this API version.

### Can I order a wildcard SSL certificate with this API?

Yes. App Service certificate orders are placed via /subscriptions/{subscriptionId}/providers/Microsoft.CertificateRegistration/certificateOrders, and the productType field on the order request determines whether the certificate is standard or wildcard.

### Can I limit what my agent is allowed to do with the Microsoft Azure WebSite Management Client API?

Yes. Because you run Jentic One yourself, your own rules decide which operations and credentials the agent can use. This API puts the subscription and resource group in the URL path and names domains, certificate orders, and sites as path segments, so you can pin the agent to a single subscription or resource group and nothing else. You also choose the exact operations it may call, so actions like registering a domain or deleting a certificate order stay off limits unless you add them.