DigiCert is a leading provider of high-assurance TLS/SSL, PKI, IoT, and signing solutions, enabling secure digital interactions worldwide.
DigiCert is a leading provider of high-assurance TLS/SSL, PKI, IoT, and signing solutions, enabling secure digital interactions worldwide. On Nagent, Digicert is exposed as a fully-configurable security & identity tools integration that any agent can call — 101 actions, and API key authentication. No code is required to wire Digicert into your workflow — connect it once via the External Integrations panel and reuse it across every agent you build.
Agent builders use Digicert to automate the kinds of tasks security & identity tools teams previously handled manually. Concrete examples — each one is a single agent step in Nagent — include:
Every action and trigger is paired with a structured input/output schema (visible in the sections below), so when you wire Digicert into Helix — our agentic agent builder — the editor knows exactly what each step expects and produces. Configure once, deploy anywhere across your Nagent agents.
Every operation an agent can call against Digicert, with input parameters and output schema. Drop these into any step of an agent built in Helix.
DIGICERT_ADD_TAGS_TO_CERTIFICATETool to add custom tags to one or more certificates for categorization. Use when you need to organize or label certificates with custom tags for easier management and filtering.
Input parameters
Custom user tags for categorizing certificates. Use meaningful labels to organize and manage certificates.
List of unique DigiCert-generated certificate IDs found on endpoints. Each ID is a hash string identifying a specific certificate.
Account identifier for the DigiCert account
Optional list of division identifiers to filter certificate scope
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_CHECK_PERMISSIONTool to check if a specific permission is available. Use when validating that the authenticated user may perform an operation before attempting it.
Input parameters
The specific permission to verify. e.g. 'cert:create', 'cert:reissue'. See https://dev.digicert.com/en/certcentral-apis/glossary.html#permissions
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_CREATE_API_KEYTool to create a new API key with specified permissions. Use when you have a valid DigiCert user_id and need to generate a new key. Note the API key appears only once; save it securely.
Input parameters
Name of the API key. Choose a meaningful label.
DigiCert user ID for whom to generate the API key.
Optional API key role ID to limit permissions. Allowed values: 0, 100, 101, 102, 103.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_CREATE_AUTH_KEYTool to create a new AuthKey for account authentication. Use when you need to generate a new AuthKey, either permanent or with a specific validity period (TTL).
Input parameters
Optional validity period in days for Time-to-Live (TTL) AuthKeys. If not specified, creates a permanent AuthKey (until manually deleted). Minimum value is 1 day.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_CREATE_CONTAINER_IP_RULESTool to add an IP restriction rule to a CertCentral account. Use when you need to limit API or user access to specific IP address ranges for enhanced security.
Input parameters
ID of user to create the rule for. Mutually exclusive with api_key_id.
ID of API key to create the rule for. Mutually exclusive with user_id.
Starting IP address in allowed address range. IPv4 format required (e.g., 192.0.2.100).
Custom rule description for documentation purposes.
ID of the top-level account container (division). Retrieve this value from the List containers endpoint; it's the container with parent_id of 0.
Ending IP address in allowed address range. IPv4 format required. For single IP, use same value as ip_address.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_CREATE_FINANCE_ORDER_PRICINGTool to get price estimates for a certificate order. Use when you need to calculate the cost of a certificate before placing an order, including base price, add-ons, tax estimates, and total cost. For Code Signing/EV Code Signing with hardware tokens or KeyLocker, include the corresponding add-on IDs for accurate estimates.
Input parameters
List of product IDs for order add-ons (e.g., hardware tokens, KeyLocker for Code Signing products).
Details about the domains to secure with the certificate.
Order validity details for products that support multi-year plans. Overrides validity_years when provided.
Validity period for the order, in years. Valid values vary by product.
Billing address details used to calculate estimated tax.
Certificate product identifier to order (e.g., 'ssl_basic', 'ssl_plus', 'ssl_wildcard', 'ssl_ev_plus').
Non-contract pricing flag. Use 1 for out-of-contract pricing, 0 for contract pricing. Defaults to 0.
Expiration date of the order being renewed, in YYYY-MM-DD format. Use when estimating renewal order pricing.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_CREATE_ORGANIZATIONTool to create a new organization in your DigiCert CertCentral account. Use when you need to add a new organization with required details like legal name, address, contact information, and country.
Input parameters
Postal code. Max 40 characters.
City location. Max 64 characters.
Legal name of the organization. Max 64 characters.
State or province. Use full name not abbreviation.
Organization street address. Max 64 characters.
Two-letter ISO 3166-1 alpha-2 country code.
Second address line for additional address details.
Organization phone number. Max 32 characters.
Array of validation submissions for prevalidation.
DBA (Doing Business As) name for the organization.
Contact details for the organization including first_name, last_name, email, and telephone (all required).
Override duplicate organization checking. Set to true to bypass duplicate detection.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_CREATE_ORGANIZATION_VALIDATIONTool to submit an organization for validation and add verified contacts for specific product types. Use when you need to validate an organization for certificate issuance. Note: EV, CS, and EV_CS validation types require verified users.
Input parameters
List of validation types the organization will be validated for. Must contain at least one validation.
The ID of the organization to submit for validation.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_CREATE_SCAN_LISTTool to retrieve the list of scan templates along with their name, status, and configuration. Use when you need to view or manage DigiCert Discovery scans with support for filtering by division, state, and other criteria.
Input parameters
Number of records to return per page. Defaults to 50, maximum 100.
The account identifier for the DigiCert account.
Sort order options for scan list.
Starting position for pagination (1-based). Defaults to 1.
Array of division identifiers to filter scans by division.
Filter for scans originating from wall alerts.
List of filtering criteria to refine scan results. Each criterion has key, value, and operation fields.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_DELETE_ACCOUNT_AUTH_KEYTool to delete your account's AuthKey. Use when you need to revoke an existing AuthKey. If no auth_key_id is specified, deletes the primary AuthKey.
Input parameters
Unique identifier for a specific AuthKey to delete. If not provided, deletes the account's primary AuthKey.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_DELETE_CERTIFICATETool to delete certificates from DigiCert Discovery inventory. Use when you need to remove one or more certificates identified by their certificate IDs.
Input parameters
List of certificate IDs to remove from inventory.
Your DigiCert account identifier.
Optional list of division identifiers to scope the deletion.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_DELETE_DOMAINTool to delete a domain with the given ID. Use when you need to remove a domain from the CertCentral account.
Input parameters
The identifier for the domain to be removed.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_DELETE_KEYTool to delete SSH keys from DigiCert Discovery. Use when you need to remove one or more SSH keys by their names.
Input parameters
Account ID for the DigiCert Discovery account.
User's division IDs. Provide an empty list if not applicable.
List of one or more SSH key names to delete.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_DELETE_REPORTS_ENDPOINTSTool to delete one or more endpoints from the Discovery API. Permanently removes the endpoints and any certificates associated with the scan results. Use when you need to clean up IP/port combinations that should no longer be monitored.
Input parameters
Account ID for the DigiCert account.
Collection of IP and port pairs representing endpoints to permanently remove. At least one endpoint required.
List of division IDs. Can be empty array if no specific divisions are targeted.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_EXECUTE_GRAPHQL_QUERYTool to execute GraphQL queries against DigiCert Custom Reports API. Use when you need to retrieve customizable certificate order data using GraphQL syntax. Supports queries like order_details and order_details_by_id with flexible field selection.
Input parameters
GraphQL query string to execute. Must include at least one field. Available queries: order_details (returns details for all certificate orders), order_details_by_id (returns details for a specific order by ID). Example: {order_details(status:"pending",limit:5){id,common_name,status}} or {order_details_by_id(order_id:123456){id,common_name,dns_names,status}}
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_FILTER_KEYSTool to filter keys in DigiCert Discovery API by various criteria. Use when you need to search and filter keys based on attributes like name, IP, port, authentication methods, or other key properties.
Input parameters
Number of records per page. Allowed: 1-100. Default: 50
Account ID to filter keys for
Sort direction for results.
Index of the first result. Default: 1
List of user's division IDs. Can be empty list.
The value to show in results. Specifies which attribute to filter keys by.
Sort results by specified parameter. Default: isCertPresent
Filter results by specified values. Array of objects with key, operation, and value.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ACCOUNTTool to retrieve details about your CertCentral account. Use when you need account information such as billing model, account manager details, or account settings.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ACCOUNT_DETAILSTool to retrieve account details for the authenticated user. Use when you need to get information about the user assigned to the API key, including profile details, roles, and container assignments.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ACCOUNT_GUEST_ACCESSTool to retrieve the guest access URL for your DigiCert account. Use when you need to obtain the guest access URL to share with external users.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ACCOUNT_METADATATool to retrieve metadata for custom order fields in the account. Use when you need to list custom field configurations including their validation types and display settings.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ACCOUNT_SAML_ENTITYTool to retrieve SAML entity details for your account. Use when you need to check SAML SSO configuration or verify identity provider settings. Returns empty object if no SAML entity is configured.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_AGENT_IP_PORTTool to retrieve agent IP port details from DigiCert Discovery API. Use when you need to view IP addresses and ports being monitored by DigiCert agents in a specific account and division.
Input parameters
The DigiCert account ID (can be obtained from /services/v2/account endpoint).
Array of division IDs to filter results (use root_container_id from account endpoint).
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ALERT_COUNTTool to retrieve alert count from DigiCert Discovery API dashboard. Use when you need to query the number of alerts for a specific module (scan, cert, endpoint, etc.) within an account and division.
Input parameters
Account identifier for the DigiCert account.
Certificate status values.
Module name to query alerts for. Options: scan, cert, rotationElapsed, endpoint, duplicateKeys, sensor, isKeyDiscovered, sensorUpgrade.
List of division ID numbers to filter alerts. Can be empty list.
Days until certificate expiration. Required if moduleName is 'cert' or 'endpoint' and certStatus is not provided.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_AUTH_KEYTool to retrieve AuthKey details by ID. Use when you need to fetch information about an active, inactive, or expired AuthKey.
Input parameters
The ID of the AuthKey to retrieve. This is the unique identifier for the AuthKey.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_AUTHORIZATION_CONTAINERTool to list all containers authorized to perform a permission action. Use when checking which containers a user can access for specific operations like viewing, editing, or creating resources.
Input parameters
The permission type to query for authorized containers. Determines which containers the user can access for this permission.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_CERTIFICATE_AUTHORITY_HELPERTool to retrieve certificate authority API helper information including version details. Use when verifying API connectivity or checking the current API version.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_CERTIFICATE_RATINGTool to retrieve SSL certificate security rating from DigiCert Discovery API. Use when you need to assess certificate security posture, view rating details, or audit certificate configurations. Requires valid accountId and certId from DigiCert.
Input parameters
Unique DigiCert-generated certificate ID from discovered endpoints.
Your DigiCert account identifier.
Optional list of division identifiers for scoped queries.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_CLOUD_SCANTool to get cloud scan details from DigiCert Discovery API. Use when you need to retrieve information about an existing cloud scan template including its status and completion percentage.
Input parameters
Account identifier for the cloud scan.
Division identifier for the cloud scan.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_CONTAINER_BY_CONTAINERTool to get details about a specific container using its ID. Use when you need to retrieve information about a container's configuration, status, and properties.
Input parameters
The ID of the container to retrieve details for.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_CONTAINER_CHILDRENTool to list all child containers for a parent container. Use when you need to retrieve the hierarchy of containers under a specific parent.
Input parameters
The ID of the parent container whose children you want to retrieve
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_CONTAINER_IP_RULESTool to retrieve a list of existing IP restriction rules in a CertCentral account. Use when you need to audit or manage IP access controls for a specific container.
Input parameters
ID of the top-level account container (division). Retrieve this value from the List containers endpoint; it's the container with parent_id of 0.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_CONTAINER_ORDER_ORGANIZATIONTool to list all organizations assigned to a container. Use when you need to retrieve organization details and validation information for a specific container.
Input parameters
The unique identifier for the container.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_CONTAINER_PRODUCT_LIMITSTool to get information about the limits and settings for a container's enabled products. Use when you need to check product-specific restrictions for certificate ordering.
Input parameters
The unique identifier of the container to query for product limits.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_CONTAINER_ROLETool to retrieve all access roles available to a container. Use when you need to list permissions or roles associated with a specific container.
Input parameters
The unique identifier for the container
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_CONTAINER_TEMPLATE_BY_TEMPLATETool to get details about a template in a container. Use when you need to retrieve template information including access roles and creation date.
Input parameters
The identifier for the template.
The identifier for the specific container.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_DOMAIN_DCVTool to retrieve domain DCV (Domain Control Validation) information from DigiCert. Use when you need to check domain validation status, DCV tokens, expiration dates, or validation methods.
Input parameters
The unique identifier for the domain to retrieve DCV information for.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_DOMAIN_DCV_EMAILSTool to retrieve email addresses that receive validation emails from DigiCert for the email domain control validation (DCV) method. Use when you need to determine which email addresses can be used to validate domain ownership during certificate issuance.
Input parameters
The identifier for the domain. Can be the domain ID or the fully qualified domain name (FQDN). Example: 'example.com' or '12345'.
When set to true, filters results to only addresses allowed by account settings. Defaults to false if not provided.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_DOMAIN_EXPIRATION_COUNTTool to get the number of domains in your account with expired or expiring OV or EV domain validations. Use when you need to audit domain validation status across different time ranges.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_DOMAIN_VALIDATION_TYPETool to list available validation types for domains. Use when you need to retrieve the supported domain validation types (e.g., OV, EV) and their requirements.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_FINANCE_BALANCETool to view the current balance of your DigiCert account. Use when you need to check available funds, unpaid invoices, or credit limits.
Input parameters
Filter results to the specified container when account has multiple divisions. Required for accounts with multiple divisions.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_FINANCE_BALANCE_HISTORYTool to list balance adjustment history for your DigiCert account. Use when you need to review financial transactions, track deposits, charges, or refunds.
Input parameters
Sort results by properties. Prefix with '-' for descending order (e.g., 'transaction_date' or '-transaction_date').
Maximum number of results to return.
Index of first result to include for pagination.
Filter results by specified properties. Use property names as keys (e.g., {'transaction_type': 'Charge', 'transaction_date': '2024-01-01'}).
Container ID for balance history retrieval. Required if your account has multiple divisions.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_INFOTool to retrieve remote service information from DigiCert Document Manager CSC API. Use when you need details about the remote service such as supported authentication methods, API methods, service description, or language preferences.
Input parameters
Request a preferred language of the response to the Remote Service, specified according to RFC 3066. If present, the Remote Service shall provide language-specific responses using the specified language. If the specified language is not supported then it shall provide these responses in the language as specified in the lang output parameter.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_KEY_BY_KEYTool to retrieve detailed information about an API key. Use when you need to check key status, owner, creation date, or ACME configuration.
Input parameters
The unique identifier for the API key you want to retrieve information about.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_MPKI_VERSIONTool to query the TLM application version from DigiCert MPKI API. Use when you need to check the current version of the DigiCert ONE MPKI system.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ORDER_CERTIFICATE_STATUS_CHANGESTool to list orders that changed status during a given time frame. Use when you need to track order status changes within a specific time period.
Input parameters
Limit results to orders that changed status in the last n minutes (max: 10080 minutes = 7 days).
Limit results to orders that changed status in the last n seconds (max: 604800 seconds = 7 days).
Date range filter for status changes. Use format 'yyyy-MM-dd...yyyy-MM-dd' or 'yyyy-MM-dd+HH:mm:ss...yyyy-MM-dd+HH:mm:ss' (e.g., '2023-01-01...2023-01-07').
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ORGANIZATION_BY_ORGANIZATIONTool to retrieve detailed information about an organization from DigiCert. Use when you need organization details such as legal name, address, contacts, validation status, or container assignments.
Input parameters
The unique identifier for the organization to retrieve.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ORGANIZATION_CONTACTTool to retrieve organization and technical contact details for a specific organization. Use when you need contact information for administrative or technical purposes.
Input parameters
The unique identifier for the organization.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ORGANIZATION_RECENTTool to retrieve the three most recently used organizations from your CertCentral account. Use when you need to quickly access organizations that were recently used for certificate orders or management.
Input parameters
Filter results to the specified container (required only for accounts with multiple divisions).
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ORGANIZATION_VALIDATIONTool to get validation details for an organization. Use when you need to retrieve approved validation types, statuses, and expiration dates for a specific organization.
Input parameters
The unique identifier for the organization whose validation details you want to retrieve
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_ORGANIZATION_VALIDATION_TYPETool to list available validation types for organizations. Use when you need to retrieve the supported organization validation types and their requirements.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_PRODUCT_BY_NAMETool to get information about a product by its name identifier. Use when you need product details such as validation type, validity periods, supported platforms, or certificate configuration options.
Input parameters
Product identifier (e.g., ssl_basic, ssl_plus, ssl_wildcard, ssl_ev_plus)
Container/division ID for customized product settings
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_PRODUCT_PLATFORM_CERTFORMAT_MAPPINGTool to list the certificate format that is returned for a particular server platform. Use when you need to determine the recommended certificate format for a specific platform or to view all available platform-certificate format mappings.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_PRODUCT_PRICINGTool to retrieve a comprehensive list of product prices available under your DigiCert account. Use when you need pricing information including product names, validity periods, costs, and additional Subject Alternative Names (SANs) pricing.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_REMOTE_SERVICE_INFOTool to retrieve information about DigiCert's Document Manager CSC (Cloud Signature Consortium) remote service. Use when you need service metadata such as supported authentication methods, API version, available methods, or service description.
Input parameters
Request a preferred language of the response to the Remote Service, specified according to RFC 3066 (e.g., 'en-US', 'es-ES'). If present, the Remote Service shall provide language-specific responses using the specified language. If the specified language is not supported, responses will be in the language specified in the lang output parameter.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_REPORT_ORDERTool to retrieve a CSV report of all certificate orders. Use when you need to export or analyze certificate order data in bulk with support for pagination.
Input parameters
Total number of results to include in the response. Max: 100,000 Default: 50,000
Index of the first result to include in the response. Default: 0
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_REPORT_ORDER_EXPIRINGTool to get the number of orders and certificates that expire within 0-30, 30-60, and 60-90 days from now. Use when you need to audit certificate and order expiration status across different time ranges.
Input parameters
Limit results to a specific container.
When true, includes certificate expiration counts alongside order counts.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_REPORT_REQUESTTool to get total requests and requests by type for your account. Use when you need to retrieve aggregated pending request data categorized by type (new requests, revocations, duplicates, and reissues).
Input parameters
Limit results to a specific container.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_SCAN_SUBDOMAINSTool to retrieve all subdomains included in a DigiCert Discovery scan. Use when you need to get a list of subdomains for one or more domains from the scan results.
Input parameters
Collection of domain names to scan for subdomains.
Account identifier for the DigiCert account.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_USERTool to retrieve details about a specific user in CertCentral. Use when you need user information such as access roles, container assignments, or contact details. Specify 'me' as user_id to get the authenticated user's information.
Input parameters
The user's ID, or use 'me' to retrieve the authenticated user's information.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_GET_USER_AVAILABILITYTool to check if a username is available in DigiCert. Use when you need to verify whether a username can be used before creating a new user account.
Input parameters
The username to check for availability.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_API_ACCESS_ROLESTool to retrieve a list of available API access roles. Use after confirming authentication with an API key.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_API_KEYSTool to retrieve a list of API keys and ACME URLs. Use to view all keys or filter by user_id or container_id.
Input parameters
Get keys for only the specified user.
Get keys for only the specified container.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_CERTIFICATE_FILTER_VALUESTool to retrieve available filter values for certificate attributes from DigiCert Discovery API. Use when you need to discover valid values for filtering certificates by common name, organization, status, serial number, security rating, or certificate authority.
Input parameters
Records returned per page (default: 50, maximum: 100).
Account identifier for the DigiCert account.
Sort order direction.
Beginning position for pagination (default: 1).
Division identifiers to scope the query. Empty list queries all divisions.
Specifies which attribute data to retrieve. Options: cn (common name), org (organization), status, serialNumber, securityRating, ca (certificate authority).
Column identifier to sort results by.
Filters to narrow results. Each criterion specifies key (matching filterSelected values), operation (e.g., STARTS_WITH), and value array.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_CERTIFICATE_ORDERSTool to list all certificate orders in your DigiCert account. Use when you need to retrieve order information with support for filtering by status, product, container, and pagination.
Input parameters
Sort field and direction. Prefix with '-' for descending order. Comma-separate for multiple sort fields. Examples: 'date_created', '-date_created', 'status,-date_created'.
Number of results per page. Maximum 1000 (default: 1000).
Starting index for pagination (default: 0).
Search filter to match email or common_name. Use '%25' prefix for partial matches (e.g., '%25example' to find orders with 'example' in the name).
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_CERTIFICATESTool to list all certificates discovered by DigiCert Discovery scans. Use when you need to retrieve certificate inventory with support for filtering by status, organization, common name, expiration, and other attributes.
Input parameters
Number of records per page (default: 50, max: 100).
Account identifier (required).
Sort direction: 'ASC' for ascending or 'DESC' for descending (default: 'ASC').
Starting position for pagination (default: 1).
Division identifiers. Can be an empty array to include all divisions.
Field to sort by. Supported values: 'cn', 'org', 'status', 'serialNum', 'securityRating', 'ca', 'daysToExpire' (default: 'cn').
Filter criteria to narrow down certificate results. Each criterion specifies a key (field name), operation (EQUALS), and array of values.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_CONTAINERSTool to retrieve a list of all containers (divisions) in your DigiCert account. Use when you need to view or manage account divisions.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_CONTAINER_TEMPLATESTool to list all templates that can be used when creating containers. Use when you need to retrieve available container templates for a specific container.
Input parameters
The unique identifier for the container
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_DOMAIN_DCV_METHODSTool to retrieve available domain control validation (DCV) methods for domains. Use when you need to know which DCV methods are available for domain verification.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_DOMAINSTool to list all domains in your CertCentral account. Use when you need to retrieve domain information with support for filtering by name, validation status, and pagination.
Input parameters
Sort results by property. Prefix with '-' for descending order. Examples: 'name', '-date_created'.
Maximum number of results per page (default: 1000, max: 1000).
Starting index for pagination (default: 0).
Filter domains by name (partial/substring match). Example: 'example' matches 'example.com' and 'test.example.com'.
Filter by validation status. Examples: 'completed', 'ov_expired', 'ev_expiring'.
Control search type: 'partial' for substring match or 'exact' for exact domain name match.
Include DCV expiration as UTC ISO-8601 string in the response.
Include detailed validation status and expiration formats in the response.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_INTERMEDIATE_CERTIFICATESTool to retrieve a list of intermediate certificates. Use when you need to list all intermediate certificates for your account. No input required.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_LOCALESTool to retrieve a list of available locales. Use when you need to get supported locale codes and languages for the DigiCert Account Manager API.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_ORGANIZATION_POTENTIAL_APPROVERSTool to list all users and contacts that can be validated as verified contacts (also called EV approvers). Use when you need to identify potential approvers for organization validation.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_ORGANIZATIONSTool to retrieve all organizations in your DigiCert account. Use when you need to list, search, or audit organizations with support for filtering and pagination.
Input parameters
Sorts by property name; prefix with - for descending order (e.g., '-name', 'id').
Results per response; maximum 1000 (default: 1000).
Index of first result (default: 0).
Searches by organization ID or name containing specified string.
Returns validation details for organizations (default: false).
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_PERMISSIONSTool to list all permissions for the authenticated user. Use when you need to audit or verify the complete set of permissions available to the current API key.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_PRODUCTSTool to list all products available to your CertCentral account. Use when you need to discover available certificate products, their validation periods, or supported hash algorithms.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_SENSORSTool to list all sensors used for network scanning in DigiCert Discovery. Use when you need to retrieve sensor inventory with support for filtering by status, name, IP address, and other attributes.
Input parameters
Account identifier (required)
Sort direction for sensor list results.
User's division ID(s). Can be an empty array to include all divisions.
Allowed values for sorting sensor list.
Filter criteria to narrow down sensor results. Each criterion specifies a key (field name), operation, and array of values.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_SERVICE_USERSTool to list all DigiCert service users (API-only users). Use when you need to retrieve or audit service user accounts with support for filtering by container, access role, status, or search terms.
Input parameters
Sorts results by specified properties. Use '-' prefix for descending order (e.g., '-id', 'email').
Maximum number of results to return.
Index of the first result to include (for pagination).
Filters results to a specific container by ID.
Limits results to users with the specified access role ID.
Searches across username, first_name, last_name, or email fields.
Filters users by status (e.g., 'active', 'inactive').
If true, omits the container object from the response (default: false).
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_LIST_USERSTool to retrieve a list of CertCentral account users. Use when you need to audit or manage users with support for pagination and optional detail inclusion.
Input parameters
Maximum number of users to return (default: 100).
Starting point for the list of users returned.
Whether to include additional details for each user.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_RESEND_USER_CREATE_EMAILTool to resend the create user email to a user. Use when you need to resend the account creation email to a user who may not have received it.
Input parameters
The identifier of the user who needs the creation email resent.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_SUBMIT_DOMAIN_FOR_VALIDATIONTool to submit a domain for validation with specified validation types. Use when you need to initiate domain validation for OV or EV certificates with various DCV methods.
Input parameters
The unique identifier for the domain to submit for validation.
DCV (Domain Control Validation) method options.
When using 'email' dcv_method, restricts DCV verification emails to only the addresses in this list. Only applicable when dcv_method is 'email'.
List of validation types to submit the domain for. Each entry specifies a validation type (ov or ev).
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_ACCOUNT_EMAILSTool to update account notification and emergency email addresses. Use when you need to change the email addresses that receive account notifications or urgent security communications.
Input parameters
Comma-separated list of one or more email addresses that are copied on all emails sent out for the account, including approval notifications. Maximum 255 characters.
Comma-separated email addresses receiving urgent security communications, certificate revocations, and industry guideline changes.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_CONTAINERTool to edit a container's details including name and description. Use when you need to update container information in your DigiCert account.
Input parameters
Name of the container.
Description for the container.
The unique identifier for the container being modified.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_CONTAINER_ALLOWED_DOMAIN_NAMESTool to update a container's allowed domains. Use when you need to control which domains are permitted for certificate operations within a specific container. Note that this operation is destructive and will replace the entire allowed domains list.
Input parameters
The unique identifier of the container to update. Retrieve this value from the List containers endpoint.
Array of allowed domain names (strings). This operation is destructive - it will overwrite the existing array. Provide an empty array to clear all allowed domains.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_CONTAINER_USER_ASSIGNMENTSTool to update a container's user assignments. Use when you need to assign or reassign users to a container. Note that this operation overwrites all existing assignments.
Input parameters
The unique identifier for the container being updated.
List of user IDs to assign to the container. WARNING: This overwrites the entire existing user assignments array. An empty array will remove all user assignments.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_DOMAIN_ACTIVATETool to activate a domain in DigiCert CertCentral. Use when you need to activate a domain that has been validated and is ready for certificate issuance.
Input parameters
The unique identifier for the domain to be activated.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_DOMAIN_DCV_EMAILSTool to resend domain control validation (DCV) emails for a domain. Use when you need to trigger a new DCV email to be sent for domain validation purposes, such as when the original email was not received or has expired.
Input parameters
Locale code for the language of the validation email. Determines which language the DCV email will be sent in. Example locales: 'en' for English, 'es' for Spanish, 'fr' for French.
The unique identifier for the domain to resend DCV emails for.
The fully qualified domain name (FQDN) associated with the domain ID. When provided, limits the DCV email resend to this specific FQDN.
List of email addresses to limit DCV email recipients to. Must be valid constructed email addresses for the domain or approved DNS-based email contacts. Account settings determine which addresses qualify for receiving verification emails.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_KEYTool to edit an API key's name or access role restrictions. Use when you need to rename an API key or modify its permission scope.
Input parameters
Updated name for the key.
The identifier for the API key being modified.
To limit API key permissions, specify the API access role ID. Allowed values: 0, 100, 101, 102, 103.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_KEY_STATUSTool to activate, deactivate, or revoke a DigiCert API key. Use when you need to change the status of an existing API key by its ID.
Input parameters
The unique identifier for the API key to be modified.
Updated status for the key. Use 'active' to activate, 'disabled' to deactivate, or 'revoked' to revoke the key.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_NOTIFICATIONSTool to update CertCentral account notification settings. Use when you need to configure certificate lifecycle email recipients, organization validation preferences, or account balance notifications.
Input parameters
List of notification settings to update, each containing name and value fields
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_ORGANIZATIONTool to update an organization's details in your DigiCert CertCentral account. Use when you need to modify organization information such as name, address, telephone, or location details. Note: All fields (name, address, city, state, country, telephone) are required. The zip field may be required depending on the country (e.g., required for US). Updating organization details will invalidate current validations.
Input parameters
Postal code. Required for certain countries like US.
City location. Max 64 characters. Required field.
Legal name of the organization. Max 64 characters. Required field.
State or province. Use full name not abbreviation. Required field.
Organization street address. Max 64 characters. Required field.
Two-letter ISO 3166-1 alpha-2 country code. Required field.
Second address line for additional address details. Max 64 characters.
Organization phone number. Max 32 characters. Required field.
The unique identifier for the organization to update.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_ORGANIZATION_ACTIVATETool to activate an organization in DigiCert CertCentral. Use when you need to activate an organization that has been validated and is ready for certificate operations.
Input parameters
The unique identifier for the organization to be activated.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_ORGANIZATION_CONTACTTool to update or replace organization contact and technical contact for an organization. Use when you need to modify contact information associated with an organization.
Input parameters
Array of contact objects to update or replace. Maximum one contact per contact_type (organization_contact or technical_contact).
The ID of the organization to update contacts for.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_ORGANIZATION_DEACTIVATETool to deactivate an organization in DigiCert CertCentral. Use when you need to deactivate an organization that is no longer active or should be disabled.
Input parameters
The unique identifier for the organization to deactivate.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_RENEWAL_EMAIL_PREFERENCETool to enable or disable renewal notifications for SSL/TLS certificates discovered in DigiCert Discovery. Use when you need to manage email alerts for certificate renewals.
Input parameters
Your DigiCert account identifier.
Optional list of user's division identifiers to scope the operation.
List of unique DigiCert-generated certificate IDs found on the endpoint.
Set to true to enable renewal email notifications, false to disable them.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_REPORTTool to update an existing report’s configuration. Use when you need to modify the schedule, recipients, or format of a scheduled report.
Input parameters
Output format for generated reports. Only one format.
Updated schedule settings for the report.
New display name for the report.
Updated metadata defining report type, columns, filters, and sources.
UUID of the report to update.
List of users to notify when report is generated.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_USERTool to update a user's profile information in CertCentral. Use when you need to modify user details such as name, email, job title, or SAML SSO settings. The email field is required; other fields are optional.
Input parameters
Valid email address (max 255 characters). This is the only required field.
The ID of the user to update.
Username for the profile. Valid characters: a-z, A-Z, 0-9, @, -, _, + (max 128 chars).
Professional role; required for EV approvers (max 64 chars). Omitting this field removes it from the profile.
User's family name (max 128 characters).
Contact number; required for EV approvers (max 64 chars). Omitting this field removes it from the profile.
User's given name (max 128 characters).
Set to 'true' to restrict user to SAML SSO authentication only. Accepts 'true' or 'false' as strings.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_USER_CONTAINER_ASSIGNMENTSTool to update container (division) assignments for a user. Use when you need to modify which containers a user has access to. Note that this completely overwrites existing assignments, and an empty array removes all restrictions.
Input parameters
The unique identifier of the user whose container assignments will be updated.
List of container (division) IDs to assign to the user. This completely overwrites existing assignments. To get a list of containers in your account, use the List containers API. An empty array removes all container assignments, making the user unrestricted with access to all containers.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_UPDATE_USER_ROLETool to change a user's access role in CertCentral. Use when you need to modify permissions by assigning different roles to an existing user.
Input parameters
The ID of the user whose role to change.
List of access role assignments. Each role grants specific permissions to the user.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_VALIDATE_VMC_ENCODED_LOGOTool to validate if an SVG file format is compatible with Verified Mark Certificate (VMC) or Common Mark Certificate (CMC) requirements. Use when you need to verify logo format compliance before submitting for VMC/CMC issuance.
Input parameters
Compressed logo data, formatted as a base64-encoded string. Prepare by compressing SVG content with gzip and encoding with base64: echo '<SVG content>' \\ | gzip \\ | base64
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_VALIDATE_VMC_LOGOTool to validate SVG logo format for Verified Mark Certificates (VMC) or Common Mark Certificates (CMC). Use when you need to check if an SVG file meets DigiCert's VMC/CMC requirements before certificate issuance.
Input parameters
Raw SVG file content to validate. Must be a valid SVG XML string. Can include or omit the XML declaration tag (<?xml version="1.0" encoding="UTF-8"?>).
Whether the SVG content includes an XML declaration tag. If True or if SVG starts with '<?xml', Content-Type 'image/svg+xml' is used. Otherwise, 'image/svg' is used. Auto-detected if not specified.
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
DIGICERT_VERIFY_TEMPLATETool to verify a certificate template structure against DigiCert's validation rules. Use when you need to validate template JSON before creating or updating a template. Returns success (204) if valid, or raises ExecutionFailed with details if invalid.
Input parameters
JSON-formatted string containing the certificate template structure. The template must include: 'name' (string), 'signature_algorithm' (with 'allowed_algorithms' array and 'default_algorithm'), 'subject' (with 'attributes' array containing type fields like 'common_name'), 'validity' (with 'min_duration', 'max_duration', 'default_duration' objects specifying 'unit' and 'value'), and 'extensions' (with 'extended_key_usage' containing 'required_usages' array with 'oid' fields).
Output
Data from the action execution
Error if any occurred during the execution of the action
Whether or not the action execution was successful or not
No publicly available marketplace agent is found using this tool yet. There are 95 agents privately built on Nagent that already use Digicert.
Build on Nagent
Connect Digicert to any Nagent agent in minutes — no API key management, no boilerplate. Just configure and deploy.
The five questions agent builders ask before adopting a new integration.
Open the External Integrations panel inside Nagent (app.nagent.ai/externalIntegration), find Digicert, and click "Connect Now." You'll authenticate with an API key — Nagent handles credential storage and refresh automatically. Once connected, Digicert is available to any agent in your workspace.
No. Nagent provides no-code integration for every tool. Once Digicert is connected, you configure its 101 actions directly in the agent builder UI — no API calls, no boilerplate, no schema management.
Helix — Nagent's agentic agent builder — lets you drop Digicert steps into any workflow visually. Pick an action (e.g., one of those listed above), fill in the inputs (Helix knows the required vs. optional schema for each parameter), and connect it to upstream/downstream steps. Triggers run as the entry point of an agent, so when a Digicert event fires, the agent kicks off automatically.
Every Digicert action and trigger ships with a fully-typed schema — input parameters with name, type, required flag, and description, plus the output payload shape. The schemas are documented in the sections above. Helix uses these schemas to validate your configuration at build time and to type-check the data flowing between steps.
Yes. While Digicert ships with 101 pre-built security & identity tools actions, you can layer custom logic around them inside Helix — pre/post-processing steps, conditional branches, retries, or stitching Digicert together with other connected tools. For deeper customization, talk to our team about Nagent's Agentic AI Lab — forward-deployed engineers who build Digicert-based workflows tailored to your business.