Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Red Sift Certificates (BYOK) — connector documentation

  • MCP endpoint: https://byok-redsift-certificates.connectorbay.com/mcp
  • REST API: POST https://byok-redsift-certificates.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-redsift-certificates.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Red Sift Certificates Red Sift Certificates API key, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-redsift-certificates.connectorbay.com/health · Tool schemas: https://byok-redsift-certificates.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-redsift-certificates · agent@connectorbay.com

What Red Sift Certificates (BYOK) is for

Red Sift Certificates (BYOK) lets an AI assistant read your own Red Sift Certificates data through the Red Sift Certificates API with a key you supply (Red Sift Certificates API key). Read-only: 9 tools (list_hosts, list_certs, get_cert, list_expiring_certs, list_issues, get_issue_stats, list_groups, list_events, list_report_cards). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to rpc.redsift.cloud. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Red Sift Certificates. Red Sift Certificates and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which hosts are we monitoring and which are idle?"
  • "Which of our certificates are active and when do they expire?"
  • "Show certificate ab12 and tell me when it expires"
  • "Which certificates in the prod group expire soon?"
  • "What high severity issues are open on our hosts?"
  • "How many issues do we have by severity?"

What it does

  • list_hosts: List the hosts monitored in the account with status, origin, groups, tags, registrar and expiry of the domain registration.
  • list_certs: List TLS certificates known to the account with subject, issuer, validity dates, key and signature algorithm, covered hosts and ownership (certificate bodies are left out).
  • get_cert: Get one certificate by its SHA-256 hash with subject, issuer, validity, algorithms, hosts, CT compliance and ownership.
  • list_expiring_certs: List certificates about to expire for the hosts of a group (use the group label from list_groups).
  • list_issues: List detected issues (misconfigurations and expiring items) with title, category, severity, status and affected subject; details are left out.
  • get_issue_stats: Get issue counts grouped by status, category, severity and issue definition.
  • list_groups: List the host groups used by the organization with active host counts.
  • list_events: List recent account events (earliest first, up to 100) with id, type and time.
  • list_report_cards: List the security report cards per domain (availability, timestamp and graded sections).

BYOK key

You bring your own Red Sift Certificates Red Sift Certificates API key (https://docs.redsift.com/certificates.yaml). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to rpc.redsift.cloud over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Red Sift Certificates API (rpc.redsift.cloud) with a BYOK key; documentation: https://docs.redsift.com/certificates.yaml. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Red Sift Certificates. Red Sift Certificates and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Red Sift Certificates account.

Built for: Worldwide. Languages: English.