# SSLMate Cert Spotter API

Cert Spotter API by SSLMate monitors Certificate Transparency logs to alert users about SSL/TLS certificates issued for their domains, helping detect unauthorized certificates and potential security issues.

- **Category:** security & identity tools
- **Auth:** API_KEY
- **Composio Managed App Available?** N/A
- **Tools:** 9
- **Triggers:** 0
- **Slug:** `SSLMATE_CERT_SPOTTER_API`
- **Version:** 20260312_00

## Tools

### Add Monitored Domain

**Slug:** `SSLMATE_CERT_SPOTTER_API_ADD_MONITORED_DOMAIN`

Tool to add or update a monitored domain in Cert Spotter. Use when you need to enable monitoring for a new domain or update an existing one. If the domain already exists, omitted fields retain their existing values.

#### Input Parameters

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `name` | string | Yes | The domain name to monitor. Use a leading dot (e.g., .example.com) to monitor subdomains. |
| `enabled` | boolean | No | Whether monitoring is enabled for this domain. Default: true |

#### Output

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `data` | string | Yes | Data from the action execution |
| `error` | string | No | Error if any occurred during the execution of the action |
| `successful` | boolean | Yes | Whether or not the action execution was successful or not |

### Authorize Certificate

**Slug:** `SSLMATE_CERT_SPOTTER_API_AUTHORIZE_CERTIFICATE`

Tool to authorize a certificate in Cert Spotter. Use when you need to prevent future notifications for a known certificate. Once authorized, the certificate will not trigger alerts if discovered in Certificate Transparency logs.

#### Input Parameters

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `tbs_sha256` | string | Yes | Lowercase hex-encoded SHA-256 hash of the TBSCertificate to authorize. Must be exactly 64 hexadecimal characters. |

#### Output

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `data` | string | Yes | Data from the action execution |
| `error` | string | No | Error if any occurred during the execution of the action |
| `successful` | boolean | Yes | Whether or not the action execution was successful or not |

### Authorize Public Key

**Slug:** `SSLMATE_CERT_SPOTTER_API_AUTHORIZE_PUBLIC_KEY`

Tool to authorize a public key in Cert Spotter. Use when you need to prevent notifications for certificates using a specific public key. Authorizing a key before certificate issuance avoids race conditions.

#### Input Parameters

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `dns_names` | array | Yes | List of DNS names for which the public key is authorized. Cert Spotter will not send notifications for certificates using this key on these domains. |
| `pubkey_sha256` | string | Yes | Lowercase hex-encoded SHA-256 hash of the public key to authorize. The hash is computed over the DER-encoded subject public key info. |

#### Output

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `data` | string | Yes | Data from the action execution |
| `error` | string | No | Error if any occurred during the execution of the action |
| `successful` | boolean | Yes | Whether or not the action execution was successful or not |

### Get CertSpotter Event

**Slug:** `SSLMATE_CERT_SPOTTER_API_CERTSPOTTER_GET_EVENT`

Tool to retrieve detailed information about a specific CertSpotter certificate issuance. Use when you need to inspect certificate metadata after confirming an issuance ID.

#### Input Parameters

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `event_id` | string | Yes | The unique identifier of the CertSpotter issuance/event to retrieve. |
| `expand_issuer` | boolean | No | Whether to expand and include issuer details in the response. |
| `expand_cert_der` | boolean | No | Whether to include the base64 DER-encoded certificate in the response. |
| `expand_dns_names` | boolean | No | Whether to expand and include DNS names in the response. |

#### Output

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `data` | string | Yes | Data from the action execution |
| `error` | string | No | Error if any occurred during the execution of the action |
| `successful` | boolean | Yes | Whether or not the action execution was successful or not |

### Delete Monitored Domain

**Slug:** `SSLMATE_CERT_SPOTTER_API_DELETE_MONITORED_DOMAIN`

Tool to delete a monitored domain from Cert Spotter. Use when you need to remove a domain from monitoring. Returns success confirmation on deletion (HTTP 204). Returns 404 if domain not found.

#### Input Parameters

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `name` | string | Yes | The monitored domain name to delete (e.g., '.example.com' for wildcard or 'example.com' for exact match) |

#### Output

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `data` | string | Yes | Data from the action execution |
| `error` | string | No | Error if any occurred during the execution of the action |
| `successful` | boolean | Yes | Whether or not the action execution was successful or not |

### Get Certificate (API v2)

**Slug:** `SSLMATE_CERT_SPOTTER_API_GET_CERTIFICATE_V2`

Tool to retrieve certificate information by common name (domain). Use when you need to inspect certificate metadata, status, or configuration for a specific domain.

#### Input Parameters

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `common_name` | string | Yes | The certificate common name (domain) to retrieve, e.g., 'example.com' |

#### Output

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `data` | string | Yes | Data from the action execution |
| `error` | string | No | Error if any occurred during the execution of the action |
| `successful` | boolean | Yes | Whether or not the action execution was successful or not |

### Get Monitored Domain

**Slug:** `SSLMATE_CERT_SPOTTER_API_GET_MONITORED_DOMAIN`

Tool to retrieve a specific monitored domain by its name. Use when you need to check the monitoring status of a domain.

#### Input Parameters

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `name` | string | Yes | The monitored domain name. Use a leading dot (e.g., .example.com) to include subdomains. |

#### Output

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `data` | string | Yes | Data from the action execution |
| `error` | string | No | Error if any occurred during the execution of the action |
| `successful` | boolean | Yes | Whether or not the action execution was successful or not |

### List CT Issuances

**Slug:** `SSLMATE_CERT_SPOTTER_API_LIST_CT_ISSUANCES`

Tool to list certificate issuances for a domain from Certificate Transparency logs. Use when you need to discover all unexpired certificates issued for a domain or its subdomains.

#### Input Parameters

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `after` | string | No | Return issuances discovered after this ID (for pagination). Use the ID from the last issuance of the previous page. |
| `domain` | string | Yes | Domain name to search for certificate issuances (e.g., example.com) |
| `expand` | string | No | Comma-separated list of fields to expand in response. Options: dns_names, issuer, cert_der, pubkey_der, pubkey, revocation, problem_reporting |
| `match_wildcards` | boolean | No | Include wildcard certificates that match the domain. Default: false |
| `include_subdomains` | boolean | No | Include certificates for subdomains of the specified domain. Default: false |

#### Output

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `data` | string | Yes | Data from the action execution |
| `error` | string | No | Error if any occurred during the execution of the action |
| `successful` | boolean | Yes | Whether or not the action execution was successful or not |

### List Monitored Domains

**Slug:** `SSLMATE_CERT_SPOTTER_API_LIST_MONITORED_DOMAINS`

Tool to list all monitored domains. Use when you need to audit or review the domains currently monitored by Cert Spotter.

#### Output

| Parameter | Type | Required | Description |
|-----------|------|----------|-------------|
| `data` | string | Yes | Data from the action execution |
| `error` | string | No | Error if any occurred during the execution of the action |
| `successful` | boolean | Yes | Whether or not the action execution was successful or not |