certctl: Self-hosted certificate lifecycle platform with 78 API endpoints for AI agent automation
What certctl is
certctl is a self-hosted certificate lifecycle platform with a full REST API, built specifically for automation by AI coding agents ("claws"). The creator has been developing it with Claude as a copilot from the beginning, resulting in approximately 15,000 lines of Go and TypeScript code with 744+ tests.
Key features and capabilities
The platform addresses the upcoming challenge of TLS certificate management as SC-081v3 pushes certificate lifespans to 47 days by 2029, requiring constant rotation across server fleets.
The API provides 78 endpoints covering:
- Certificate issuance
- Renewal operations
- Revocation processes
- Deployment workflows
- Agent management
- Policy enforcement
- Audit trail access
- Fleet health monitoring
- Metrics collection
Every operation available in the React dashboard is also available through the API. An MCP server is on the roadmap to expose all functionality as native MCP tools.
Practical use cases for AI agents
With structured API access, AI agents can:
- Query which certificates are expiring within a specific timeframe
- Trigger certificate renewals
- Check agent fleet status
- Pull audit logs
- Revoke compromised certificates
- Read OCSP status
This eliminates the need for browser automation or screen scraping, providing direct API access to the entire certificate lifecycle.
Infrastructure compatibility
The platform is issuer-agnostic, supporting:
- ACME/Let's Encrypt
- step-ca
- Internal certificate authorities
- Sub-CAs under enterprise roots
It's also target-agnostic with current support for:
- NGINX
- Apache
- HAProxy
Support for F5 and IIS is coming soon. This provides a single interface for AI agents regardless of the underlying infrastructure.
Development workflow
The creator maintains a "CLAUDE.md" file in the repository that tracks every milestone, file location, and architecture decision. Each development session starts by reading this document to provide full context in seconds. When a milestone ships, the document updates with what changed, enabling sustained work on a complex multi-milestone project across dozens of sessions without losing state.
📖 Read the full source: r/openclaw
👀 See Also
fintool adds stock and prediction market trading to OpenClaw agents
fintool is a new OpenClaw skill that enables AI agents to trade stocks and prediction markets. Installation requires reading a GitHub file, after which agents can execute trades on Hyperliquid, Binance, and Polymarket with JSON output for clean integration.
Mesh LLM: Distributed AI Computing on Iroh – Run LLMs Across Your Own GPUs
Mesh LLM pools GPUs you already have across machines and exposes them as one OpenAI-compatible API. Distributes models locally, via peer routing, or as a pipeline across several nodes using iroh's QUIC transport.
Why AI Bounty Hunters Are Losing Money: Data from 60 Issues
A developer tried to make Claude earn money on open-source bounties with a $20 token budget. After scanning 80+ Algora bounties, they found most are saturated with 10+ open PRs, $1 spam, or reserved for interviews. Expected value: $0.
Nyx: Autonomous Testing Harness for AI Agents
Nyx is a blackbox testing harness that probes AI agents for failure modes like logic bugs, reasoning failures, and security vulnerabilities through multi-turn adaptive conversations. It tests in under 10 minutes what manual audits take hours to surface.