For Agents
Order, manage, and renew SSL/TLS certificates with automated domain validation and CA approval workflows.
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the GoDaddy Certificates API, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
What an agent can do with GoDaddy Certificates API API.
Order SSL/TLS certificates with CSR submission and domain validation
Track certificate status through polling or webhook callbacks
Reissue certificates to add or remove domain names
Renew expiring certificates within the validity window
GET STARTED
Use for: I need to order an SSL certificate for my domain, Check the status of a pending certificate request, Reissue a certificate with additional domain names, Download the certificate bundle for installation
Not supported: Does not handle domain registration, DNS management, or web hosting — use for SSL/TLS certificate lifecycle management only.
Manage SSL/TLS certificates through GoDaddy's certificate authority infrastructure. Order, validate, issue, reissue, renew, and revoke SSL certificates with support for domain validation workflows, callback webhooks, and email-based verification. The API handles the complete certificate lifecycle including CSR validation, CA approval workflows, and certificate bundle download.
Download certificate bundles with intermediate CA chain
Manage domain validation emails and resend verification requests
Patterns agents use GoDaddy Certificates API API for, with concrete tasks.
★ Automated SSL Certificate Provisioning for Web Applications
Provision SSL/TLS certificates for web applications and APIs through automated workflows. The API handles CSR submission, domain validation via email or DNS, CA approval, and certificate issuance. Supports multi-domain certificates (SANs) and provides webhook callbacks for status updates, eliminating manual polling. Integration takes 1-2 days with callback handling.
Order an SSL certificate for example.com with SANs www.example.com and api.example.com, register a webhook callback, and download the certificate bundle once issued
Certificate Lifecycle Management for SaaS Platforms
Manage SSL certificate renewals, reissues, and revocations for multi-tenant SaaS platforms hosting customer domains. Track certificate expiration dates, automatically trigger renewal workflows 60 days before expiry, and handle domain ownership changes through certificate reissue with updated SANs. The API supports unlimited reissues during certificate lifetime.
Check certificate expiration date for cert ID abc123, initiate renewal if within 60 days of expiry, and track renewal status via callback webhook
Domain Validation Email Management
Handle domain validation workflows for SSL certificate orders by managing validation emails. Retrieve email history to confirm delivery, resend validation emails to alternate addresses if the original contact is unavailable, and track which validation steps are complete. Useful for complex domain ownership scenarios or when multiple stakeholders need to approve certificate requests.
Retrieve email history for certificate order xyz789, identify pending validation emails, and resend validation to admin@example.com
AI Agent SSL Certificate Orchestration via Jentic
AI agents use Jentic to discover and execute SSL certificate operations without hardcoded API integration. Agents search by intent (e.g., 'order an SSL certificate'), Jentic returns the GoDaddy Certificates API with schema, and the agent submits the request with credentials managed by Jentic's MAXsystem. Eliminates manual certificate management workflows and reduces provisioning time from hours to minutes.
Search Jentic for 'order SSL certificate', load the GoDaddy Certificates API schema, and execute a certificate order with CSR for example.com using isolated credentials
25 endpoints — manage ssl/tls certificates through godaddy's certificate authority infrastructure.
METHOD
PATH
DESCRIPTION
/v1/certificates
Create a pending certificate order
/v1/certificates/validate
Validate certificate order before submission
/v1/certificates/{certificateId}
Retrieve certificate details and status
/v1/certificates/{certificateId}/download
Download certificate bundle with CA chain
/v1/certificates/{certificateId}/renew
Renew an expiring certificate
/v1/certificates/{certificateId}/reissue
Reissue certificate with modified domains
/v1/certificates/{certificateId}/callback
Register webhook for status updates
/v1/certificates/{certificateId}/actions
Retrieve all certificate lifecycle actions
/v1/certificates
Create a pending certificate order
/v1/certificates/validate
Validate certificate order before submission
/v1/certificates/{certificateId}
Retrieve certificate details and status
/v1/certificates/{certificateId}/download
Download certificate bundle with CA chain
/v1/certificates/{certificateId}/renew
Renew an expiring certificate
Three things that make agents converge on Jentic-routed access.
Credential isolation
GoDaddy API keys are stored encrypted in the Jentic vault (MAXsystem). Agents receive scoped access tokens for certificate operations — the raw API key never enters the agent's context, preventing credential leakage across tool calls or agent sessions.
Intent-based discovery
Agents search by intent (e.g., 'order an SSL certificate') and Jentic returns matching GoDaddy Certificates operations with their input schemas. The agent sees POST /v1/certificates with required CSR fields, validation options, and expected responses — no manual API documentation browsing required.
Time to first call
Direct GoDaddy Certificates integration: 2-3 days for auth setup, webhook handling, CSR generation, and error recovery. Through Jentic: under 1 hour — search by intent, load schema, execute with isolated credentials.
Alternatives and complements available in the Jentic catalogue.
Cloudflare API
CDN and DNS management API that can provision Cloudflare-managed SSL certificates
Use Cloudflare API alongside GoDaddy Certificates when you need CDN, DDoS protection, and DNS management in addition to SSL certificates. Cloudflare provides free universal SSL for proxied domains, while GoDaddy Certificates API is for custom CA certificates installed on origin servers.
GoDaddy Domains API
Manage domain registrations, DNS records, and domain transfers
Use GoDaddy Domains API alongside Certificates API when you need to manage both domain registration and SSL certificates. The Domains API handles DNS record creation for certificate domain validation (if using DNS-based validation), while Certificates API handles the SSL provisioning workflow.
GoDaddy Aftermarket API
Buy, sell, and auction domain names in the GoDaddy aftermarket
Use GoDaddy Aftermarket API when acquiring domains for certificate provisioning. Purchase expired or premium domains, then use Certificates API to secure them with SSL. Useful for agents automating domain acquisition and immediate SSL setup workflows.
Specific to using GoDaddy Certificates API API through Jentic.
What authentication does the GoDaddy Certificates API use?
The GoDaddy Certificates API uses API key authentication passed in request headers. Jentic's MAXsystem stores your GoDaddy API key encrypted in the credential vault. Agents receive scoped access tokens — the raw API key never enters the agent's context. This isolation prevents credential leakage across tool calls.
Can I order multi-domain SSL certificates with the GoDaddy Certificates API?
Yes, the API supports multi-domain SSL certificates through Subject Alternative Names (SANs). When creating a certificate order via POST /v1/certificates, include the common name and additional SANs in the request body. You can also add or remove domains through the reissue endpoint, which supports unlimited reissues during the certificate lifetime.
What are the rate limits for the GoDaddy Certificates API?
Rate limit details are not specified in the OpenAPI specification. Contact GoDaddy's developer support for current rate limits and throttling policies. The API uses standard HTTP status codes (401, 403, 429) to indicate authentication and rate limit errors.
How do I track certificate order status with the GoDaddy Certificates API?
The API provides two methods for tracking certificate status: polling via GET /v1/certificates/{certificateId}/actions to retrieve stateful action history, or webhook callbacks registered via PUT /v1/certificates/{certificateId}/callback. Webhooks eliminate the need for polling — GoDaddy POSTs status updates to your registered callback URL as the certificate progresses through validation, approval, and issuance.
Can I renew SSL certificates before they expire with this API?
Yes, certificate renewal is available 60 days before expiration and up to 30 days after expiration. Use POST /v1/certificates/{certificateId}/renew with a new CSR and optionally modified SANs. The API extends the certificate validity period while maintaining the same certificate ID. New domains that don't share the base domain may require additional validation time.
How do I resend domain validation emails if the original contact is unavailable?
Retrieve the email history for a certificate using GET /v1/certificates/{certificateId}/email/history to see which emails were sent. Resend a specific email to an alternate address using POST /v1/certificates/{certificateId}/email/resend/{emailAddress}, or resend all emails using POST /v1/certificates/{certificateId}/email/{emailId}/resend. This is useful when domain ownership contacts change or validation emails are not received.
How do AI agents use the GoDaddy Certificates API through Jentic?
Install the Jentic MCP server in Claude Desktop or use the Python SDK with pip install jentic. Import with from jentic import Jentic, SearchRequest, LoadRequest, ExecutionRequest. Agents search for operations like order an SSL certificate, Jentic returns the GoDaddy Certificates API with the POST /v1/certificates endpoint schema, then the agent executes the request with credentials from the vault. Get started at https://app.jentic.com/sign-up.
/v1/certificates/{certificateId}/reissue
Reissue certificate with modified domains
/v1/certificates/{certificateId}/callback
Register webhook for status updates
/v1/certificates/{certificateId}/actions
Retrieve all certificate lifecycle actions