Renew SSL certificate
Force a re-issue of an existing certificate, ignoring the 30-day expiry window (operator-forced). ASYNC: same HTTP-01 path as issue: re-runs ACME on the same row, flips status→challenge, and on success replaces the persisted leaf / full chain / key and re-stamps expires_at (poll get_ssl_certificate or await ssl-certificates.renewed / .failed). Use after a CA chain fix or to recover a failed/expired certificate; the previous certificate keeps serving until the new one goes live.
Contract:
- MCP tool
renew_ssl_certificate, registry packagemcp.id/ssl_certificates, mountid.platform. - Operation
action, response envelopeaction_async. - Flags: dangerous: the MCP layer gates it behind a preview/commit token, and the effect cannot be undone through this API.
Authorizations
Access token issued by gtm.service.id. Its access_identity claim carries team_sid, actor_sid and actor_type, and that team scope is authoritative.
Team scope for tokens that do not carry one. Ignored when the token already names a team.
Path Parameters
SSL certificate sid (id_sc_…).
18^id_sc_Response
action_async success envelope.