SSLMate Cert Spotter API
for LuumenAI
Watch Certificate Transparency logs for your domains, and act on what shows up
Cert Spotter watches Certificate Transparency logs for certificates issued against your domains. Connect it and Luumen can read your monitored domain list, pull issuance history for any name, and open up a single certificate event during an investigation. Adding a domain to monitoring, or authorizing a certificate you recognize, runs as an approved step.
The SSLMate Cert Spotter API toolbox
9 tools: 5 read, 4 write. Reads answer instantly. Writes require approval by default. Everything is logged.
- ReadGet CertSpotter EventRetrieve detailed information about a specific CertSpotter certificate issuance.
- ReadGet Certificate (API v2)Retrieve certificate information by common name (domain).
- ReadGet Monitored DomainRetrieve a specific monitored domain by its name.
- ReadList CT IssuancesList certificate issuances for a domain from Certificate Transparency logs.
- ReadList Monitored DomainsList all monitored domains.
- WriteAdd Monitored DomainAdd or update a monitored domain in Cert Spotter. Approval by default
- WriteAuthorize CertificateAuthorize a certificate in Cert Spotter. Approval by default
- WriteAuthorize Public KeyAuthorize a public key in Cert Spotter. Approval by default
- WriteDelete Monitored DomainDelete a monitored domain from Cert Spotter. Approval by default
One prompt, start to finish
What a governed SSLMate Cert Spotter API run looks like inside Luumen.
Questions
Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
Read actions answer immediately. Anything that writes — add monitored domain, authorize certificate, authorize public key, delete monitored domain — is shown as a plan and requires approval by default, including the 1 action classified as destructive. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Every call to SSLMate Cert Spotter API — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.
Often connected alongside
All integrations
OktaAccess and posture from Okta, with approval on every change.
Microsoft Entra IDAccess and posture from Microsoft Entra ID, with approval on every change.
Auth0Access and posture from Auth0, with approval on every change.Ping IdentityAccess and posture from Ping Identity, with approval on every change.Put SSLMate Cert Spotter API to work with Luumen
Connect in minutes. Every action scoped, approved, and audited from day one.