Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Cloudflare SSL Certificates (BYOK) — connector documentation

  • MCP endpoint: https://byok-cloudflare-ssl-certificates.connectorbay.com/mcp
  • REST API: POST https://byok-cloudflare-ssl-certificates.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-cloudflare-ssl-certificates.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Cloudflare SSL Certificates Cloudflare API token with SSL and Certificates read permission, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-cloudflare-ssl-certificates.connectorbay.com/health · Tool schemas: https://byok-cloudflare-ssl-certificates.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-cloudflare-ssl-certificates · agent@connectorbay.com

What Cloudflare SSL Certificates (BYOK) is for

Cloudflare SSL Certificates (BYOK) lets an AI assistant read your own Cloudflare SSL Certificates data through the Cloudflare SSL Certificates API with a key you supply (Cloudflare API token with SSL and Certificates read permission). Read-only: 12 tools (list_certificate_packs, get_certificate_pack, get_pack_quota, list_custom_certificates, get_custom_certificate, get_universal_ssl_settings, get_ssl_verification, get_total_tls, get_authenticated_origin_pull_setting, list_origin_ca_certificates, get_origin_ca_certificate, list_mtls_certificates). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.cloudflare.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare SSL Certificates. Cloudflare SSL Certificates and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which TLS certificates does my Cloudflare zone have and when do they expire?"
  • "What is the status of certificate pack 3822ff90?"
  • "How many advanced certificate packs can I still order?"
  • "Which custom certificates are uploaded to my zone and which are expiring?"
  • "When does custom certificate 0f405ba2 expire?"
  • "Is Universal SSL enabled on my zone?"

What it does

  • list_certificate_packs: List the certificate packs of a zone (universal, advanced, custom) with hosts, certificate authority, status, validation method and validity. The certificate text and private material are left out.
  • get_certificate_pack: Get one certificate pack with hosts, certificate authority, status, validation method and its member certificates. The certificate text and private material are left out.
  • get_pack_quota: Show how many advanced certificate packs a zone may have (allocated) and how many it uses.
  • list_custom_certificates: List the custom (uploaded) certificates of a zone with hosts, issuer, status, bundle method and expiry. The certificate text and private material are left out.
  • get_custom_certificate: Get one custom certificate of a zone: hosts, issuer, status, bundle method, priority and dates. The certificate text and private material are left out.
  • get_universal_ssl_settings: Show whether Universal SSL is enabled for a zone.
  • get_ssl_verification: List the certificate validation status of a zone: validation method, certificate status and the DNS or HTTP record needed to finish validation.
  • get_total_tls: Show the Total TLS setting of a zone: enabled flag, certificate authority and validity period.
  • get_authenticated_origin_pull_setting: Show whether zone-level Authenticated Origin Pulls (client certificate to your origin) is enabled.
  • list_origin_ca_certificates: List Cloudflare Origin CA certificates issued for a zone with hostnames, request type, requested validity and expiry. The certificate text and private material are left out.
  • get_origin_ca_certificate: Get one Origin CA certificate: hostnames, request type, requested validity and expiry. The certificate text and private material are left out.
  • list_mtls_certificates: List the account's mTLS certificates (Access, Gateway or custom) with issuer, serial number, type, CA flag, upload and expiry dates. The certificate text and private material are left out.

BYOK key

You bring your own Cloudflare SSL Certificates Cloudflare API token with SSL and Certificates read permission (https://dash.cloudflare.com/profile/api-tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.cloudflare.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Cloudflare SSL Certificates API (api.cloudflare.com) with a BYOK key; documentation: https://developers.cloudflare.com/api/resources/ssl/. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Cloudflare SSL Certificates. Cloudflare SSL Certificates and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Cloudflare SSL Certificates account.

Built for: Worldwide. Languages: English.