Connect GoGetSSL

GoGetSSL is an SSL certificate reseller. A reseller account buys certificates from brands such as Sectigo, GeoTrust, Thawte, RapidSSL and GoGetSSL's own at reseller prices, pays for them from a prepaid balance, and manages domain control validation (DCV), reissues and renewals for its customers. GoGetSSL also registers Legal Entity Identifiers (LEI). StackJack talks to GoGetSSL through its Reseller API.

Connecting GoGetSSL to StackJack gives your AI assistant a family of gogetssl_ MCP tools. MCP (Model Context Protocol) tools are the standardized commands an AI assistant can call through StackJack. With them, your AI can:

• Look up products and prices - the certificate catalog, each product's details, prices per period and agreement text
• Work with CSRs - decode and validate a certificate signing request, and generate a new CSR with its private key
• Prepare domain validation - the approver email addresses a domain accepts, the values for HTTP, HTTPS and DNS validation, and the list of web server types
• Read the account - account details, the balance, the active order count, invoices, unpaid invoices and unpaid orders
• Follow orders - every order with its status, one order with its certificate and validation details, and several orders' statuses at once
• Manage LEI records - look up an LEI, list jurisdictions and read an LEI order's status
• Order and manage (on Pro plans) - order certificates, renewals and extra SAN items, reissue and cancel orders, claim the free EV upgrade, change or resend domain validation, recheck CAA records, and order, renew or confirm an LEI

How StackJack authenticates to GoGetSSL

GoGetSSL uses an API username and API password. The username is your client-area login. The API password is a separate password that you generate in the client area for the API; it is not your account password. StackJack signs in with the pair, gets a temporary auth key from GoGetSSL, and uses that key for the calls that follow. The address is fixed, so there is no URL to enter.

Creating the API password

1. Sign in to the GoGetSSL client area at my.gogetssl.com.
2. Go to Reseller Modules, then API settings.
3. Generate an API password and copy it. Treat it like a password.

Connect it in StackJack

1. Open Connectors, then GoGetSSL.
2. Enter your client-area login in API Username.
3. Paste the API password into API Password.
4. Click Test connection. StackJack signs in and reads your account details to prove the pair works, and changes nothing.

Enter the API password again whenever you save the connection, including when you only rename it.

What is worth knowing before you start

The API login can spend your balance

GoGetSSL gives an API password the full power of the reseller account, and it documents no way to make one read-only. StackJack's tool permissions are the boundary. Read tools are on the Free tier. Every tool that changes something is Pro, and these are also marked destructive and ask for approval before they run:

• Spending your balance: ordering a certificate, ordering a renewal, buying extra SAN items, ordering an LEI and renewing an LEI. GoGetSSL takes the price from your balance.
• Cancelling an order, reissuing a certificate (it replaces the issued certificate, and SANs added on a reissue are charged) and claiming the free EV upgrade
• Confirming LEI data: it is a statement that the entity data is correct
• Changing or resending domain validation: each of these sends a validation email to a person, or changes how the domain is validated

Two writes are not marked destructive, because nothing is spent or sent: rechecking CAA records and rechecking a domain's validation.

The CSR generator returns a private key once

GoGetSSL generates the private key on its side and returns it with the CSR, once. Save it where you keep certificate keys before you do anything else. StackJack keeps no copy, and never stores or forwards these answers as files.

Some actions can be repeated only every few minutes

GoGetSSL limits how often some actions run for the same order: the CAA recheck once every 10 minutes, the approver email change once every 180 seconds, and the validation email resend and the domain revalidation once every 300 seconds. A call inside that window is refused with GoGetSSL's own message; wait and try again. StackJack also paces its own requests and backs off when GoGetSSL asks it to slow down.

When GoGetSSL refuses a call

GoGetSSL reports most problems in a normal answer rather than an HTTP error. StackJack turns them back into errors and passes GoGetSSL's own words through, for example "Validity Period is not supported". Correct the value it names and try again.

• The API login and password are rejected: the API password was changed or is wrong. Generate a new one under Reseller Modules, then API settings, and paste it in.
• The auth key is refused: StackJack asks GoGetSSL for a new key and tries once more by itself. If the refusal still shows, check that API access is still enabled for the account.
• An id is not found: check product ids against the product list, order ids against the order list and invoice ids against the invoice list.

If GoGetSSL does not answer properly while an order, a renewal or another paid action is being sent, check the order and the balance in the client area before you repeat it. The first request may have been applied.

Orders come in pages

The full SSL order list takes a page size of 1 to 1000 and an offset. The invoices of a period cover at most 365 days per call. The other lists return everything in one answer.

Plans and limits

Read tools are available on the Free tier. Everything that orders, changes, sends or cancels is Pro. Business reaches the same tools as Pro and differs by monthly call quota.

See the generated GoGetSSL tool reference for the current inventory, plan assignment, input schemas, and destructive-action labels.

GoGetSSL tools

gogetssl_ · 48 tools · Free 31 · Pro 17

Products

CSR tools

Domain validation lookups

Account

LEI

Orders

Validation

Invoices