Connect Digicert to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.
Ask your agent in plain language. Each of these maps to a real tool on the server.
Use the order certificate tool in Digicert
Use the manage request tool in Digicert
Use the list domains tool in Digicert
Use the manage organization tool in Digicert
Use the revoke certificate tool in Digicert
Use the reissue certificate tool in Digicert
Supported Tools
order_certificate
Order Certificate
Order a new TLS/SSL certificate through DigiCert CertCentral. Supports OV, EV, wildcard, multi-domain, and other certificate types.
Provide the product type identifier and required fields such as CSR, common name, validity period, and organization.
manage_request
Manage Request
List, view, approve, or reject certificate order requests in DigiCert CertCentral. Requests are created when an order requires admin approval before issuance.
list_domains
List Domains
List all domains in your DigiCert CertCentral account. Optionally include validation status for each domain.
manage_organization
Manage Organization
Create, update, or retrieve an organization in DigiCert CertCentral. Organizations must be created and validated before ordering OV or EV certificates. Also supports submitting an organization for validation.
revoke_certificate
Revoke Certificate
Revoke an issued certificate in DigiCert CertCentral. After revocation, the certificate will no longer be trusted by browsers and clients. This action may require approval depending on account settings.
reissue_certificate
Reissue Certificate
Reissue an existing certificate order with new parameters such as a new CSR, different SANs, or updated common name. The original certificate may be revoked after reissuance depending on account settings.
list_organizations
List Organizations
List all organizations in your DigiCert CertCentral account. Optionally include validation status to check which organizations are pre-validated for OV, EV, or code signing certificates.
manage_domain
Manage Domain
Add a new domain to your account, retrieve domain details, activate/deactivate a domain, or submit a domain for validation. Combines domain lifecycle operations into a single tool.
list_products
List Products
List available DigiCert certificate products for your account. Use this to discover product name IDs needed when ordering certificates.
cancel_order
Cancel Order
Cancel a pending certificate order in DigiCert CertCentral. Only orders that have not yet been issued can be canceled.
get_order
Get Order Details
Retrieve full details of a specific certificate order including certificate information, organization, product, validation status, and order history.
download_certificate
Download Certificate
Download an issued certificate from DigiCert CertCentral in PEM or a certificate bundle format.
list_orders
List Certificate Orders
Retrieve a list of certificate orders from DigiCert CertCentral. Supports filtering by status and product type, with pagination.
get_current_user
Get Current User
Identify the CertCentral user assigned to the API key, including account, division, and access roles.
get_order_validation
Get Order Validation
Check the organization and domain validations required before DigiCert can issue a certificate order. Includes validation state, domain control methods, and optional domain risk status.
Enable Digicert in Metorial. In your Metorial portal, enable the Digicert MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
Sign in. Select Add and sign in to load Digicert tools.
Enable Digicert in Metorial. In your Metorial portal, enable the Digicert MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
Add a custom MCP server. On ChatGPT web, open Plugins, select +, then Add custom MCP server.
Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>), choose OAuth and accept the risk notice.
Create and install the plugin. Select Create as a plugin, install it and sign in to load Digicert tools.
Enable Digicert in Metorial. In your Metorial portal, enable the Digicert MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
Add Metorial to your MCP config. Use ~/.cursor/mcp.json for every project, or .cursor/mcp.json for one.
Sign in. Open Customize in the sidebar, find Metorial and sign in to load Digicert tools.
{
"mcpServers":{
"metorial":{
"url":"<your-magic-mcp-url>"
}
}
}
Enable Digicert in Metorial. In your Metorial portal, enable the Digicert MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
Add the server over HTTP. Add --scope user to use it in every project.
Sign in. Run /mcp, select Metorial and sign in to load Digicert tools.
claude mcp add --transport http metorial <your-magic-mcp-url>
Enable Digicert in Metorial. In your Metorial portal, enable the Digicert MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
Add the server and sign in. The Codex CLI, IDE extension and ChatGPT desktop app share this config.
Check the connection. Type /mcp in Codex to see Metorial and its Digicert tools.
codex mcp add metorial --url <your-magic-mcp-url>
codex mcp login metorial
Run Digicert through the Metorial gateway
One governed layer for every app your agents reach, not a separate connector per tool.
Give Digicert and every other app to your whole team through one MCP gateway, behind your SSO.
Scope which teams and agents can use Digicert tools with role-based access control, and trace every call.
Prefer to run it yourself? Metorial is open source and self-hostable.
Order, issue, renew, reissue, and revoke TLS/SSL certificates, code signing certificates, document signing certificates, and client certificates. Manage domains and perform domain control validation (DCV) using email, DNS CNAME, DNS TXT, or HTTP methods. Manage organizations and submit them for OV, EV, and code signing validation. Automate certificate enrollment and installation across devices using agent-based or agentless automation. Discover internal and public-facing certificates across your network. Manage private CA hierarchies and issue X.509 certificates via private PKI. Sign code and software artifacts securely through Software Trust Manager. Provision IoT devices, manage device groups, enroll device certificates, and handle firmware updates. Generate custom reports on certificate orders, domains, and organizations using GraphQL.
Frequently asked questions
Common questions about connecting Digicert to AI agents with Metorial.
How many tools does the Digicert MCP server have?
The Digicert MCP server exposes 15 tools, including Order Certificate, Manage Request, List Domains. Each one is governed and traced through Metorial.
Does the Digicert MCP server support triggers?
Digicert exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
Which AI clients can use the Digicert MCP server?
Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Digicert MCP server through the same Metorial URL.
How do I give only some teams access to Digicert?
Use role-based access control to decide which teams, users, and agents can use Digicert and which of its tools they can call.
Can I self-host the Digicert MCP server?
Yes. Metorial is open source, so you can run the Digicert MCP server yourself or use the hosted gateway.
Connect Digicert to production AI agents
See how Metorial gives your team governed access to Digicert, with tracing and security controls built in.