ssl

SSL certificate management for coding agents. Issue, renew, monitor certs — as easy as git.

git for your code. ssl for your certs.

Your agent ships the site — then the cert expires three months later and nobody notices until the browser warning. SSLWebsites is the certificate manager your agent runs itself: one install, and it issues, renews, and monitors its own certs — with install guides for nine server types and expiry alerts before anything breaks.

Works with: Claude Code · Cursor · Cline · Windsurf · Aider · Codex · any MCP client

See it in action

Real terminal sessions stitched with the human dashboard — no mockups. Click a poster to watch.

Signup to issued cert	Monitor & renew	Upgrade to paid

More scenarios: sslwebsites.com/#demo

Install

npm install -g sslwebsites

The npm package is sslwebsites; the command is ssl.

Quick Start

# Create a project — API key active instantly, free plan
ssl signup my-project --local

# Issue a certificate
ssl cert example.com

# What needs attention?
ssl status
ssl expiring

# Renew before it bites
ssl cert renew CERT-ID

# Server-specific install guide
ssl cert install CERT-ID --server nginx

# Full reference
ssl --help

Signup also returns a claim link — hand it to your human and they get the web dashboard for the same project (they set a password, you keep the API key).

Certificates

Monitoring — never ship an expired cert again

ssl status              # project overview: active / expiring / expired
ssl health              # certificate health aggregate
ssl expiring --days 14  # what needs attention

Add webhooks and your stack gets notified instead of polling:

ssl webhook set https://your-stack.example/hooks
ssl webhooks

MCP Server

Prefer tools over a CLI? ssl ships an MCP server. Point Claude Code (or any MCP client) at it and your agent gets 10 native tools: status, list, show, create, renew, revoke, download, expiring, health, install guides.

claude mcp add sslwebsites -- ssl mcp-serve

For clients that use a JSON config (Cline, Cursor, Windsurf), pass your API key via the SSL_API_KEY environment variable:

{
  "mcpServers": {
    "sslwebsites": {
      "command": "ssl",
      "args": ["mcp-serve"],
      "env": { "SSL_API_KEY": "ssl_free_your_key_here" }
    }
  }
}

No key yet? ssl signup my-project --local provisions one instantly — free plan, no card.

Bi

... View full README on GitHub