RenewRoster MCP server

REST APIMCP serverOpenAPI 3.1 spec

RenewRoster runs a remote Model Context Protocol server, so AI assistants can check and manage your agency's domains and SSL certificates.

Server URLhttps://app.renewroster.com/mcp
TransportStreamable HTTP (stateless)
AuthHeader Authorization: Bearer <API key>
Rate limitsSame as the REST API: 60/min on free, 300/min on paid plans

1. Create an API key

In the dashboard open API and create a key. Choose Read-only if the assistant should only look things up, or Read + write to let it add and remove assets. Copy the key; it's shown once.

2. Add the server to your client

Claude Code

claude mcp add --transport http renewroster https://app.renewroster.com/mcp --header "Authorization: Bearer $RR_KEY"

Claude Desktop

Settings → Developer → Edit Config, then add (uses mcp-remote to pass the header):

{
  "mcpServers": {
    "renewroster": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://app.renewroster.com/mcp", "--header", "Authorization:${RR_AUTH}"],
      "env": { "RR_AUTH": "Bearer rr_live_xxxxxxxxxxxx_yourSecret" }
    }
  }
}

Cursor

~/.cursor/mcp.json (or .cursor/mcp.json in a project):

{
  "mcpServers": {
    "renewroster": {
      "url": "https://app.renewroster.com/mcp",
      "headers": { "Authorization": "Bearer rr_live_xxxxxxxxxxxx_yourSecret" }
    }
  }
}

VS Code (GitHub Copilot)

.vscode/mcp.json. VS Code prompts for the key and stores it securely:

{
  "inputs": [{ "type": "promptString", "id": "rr-key", "description": "RenewRoster API key", "password": true }],
  "servers": {
    "renewroster": {
      "type": "http",
      "url": "https://app.renewroster.com/mcp",
      "headers": { "Authorization": "Bearer ${input:rr-key}" }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "renewroster": {
      "serverUrl": "https://app.renewroster.com/mcp",
      "headers": { "Authorization": "Bearer rr_live_xxxxxxxxxxxx_yourSecret" }
    }
  }
}

Keep keys out of shared repos. Prefer environment variables or your client's secret input.

Tools

ToolKeyWhat it does
list_expiringreadDomains and certificates expiring within N days (default 30), including expired
list_assetsreadAll tracked assets with filters: type, client, status, expiring_within
get_assetreadOne asset with recent check history
list_clientsreadClients with asset counts
lookup_domainreadLive RDAP/WHOIS lookup of any domain (not saved)
lookup_certreadLive TLS check of a public host's certificate (not saved)
add_domainread + writeStart tracking a domain, optionally under a client
add_ssl_hostread + writeStart tracking a host's SSL certificate
check_nowread + writeRe-check one asset now (rate-limited)
add_clientread + writeCreate a client
delete_assetread + writeStop tracking an asset. Marked destructive, so clients ask before running it
get_asset_historyreadCheck history for one asset
lookup_ctreadLatest certificate for a hostname from Certificate Transparency logs
get_agencyreadPlan, usage against limits and API rate limit
list_membersreadTeam members and roles
list_alert_channelsreadAlert channels (URLs masked)
get_remindersreadReminder schedule
get_reportreadMonthly renewal report for a YYYY-MM period
list_webhooksreadWebhooks and last delivery
list_webhook_deliveriesreadDelivery log for one webhook
update_assetread + writeChange client, who pays, auto-renew, cost, per-asset reminder days, or rename
import_assetsread + writeBulk add up to 1000 domains/SSL hosts; refused if it would pass the plan limit
set_remindersread + writeSet the agency reminder schedule
add_alert_channelread + writeAdd an email, Slack, Discord or webhook alert channel
update_alert_channelread + writeChange or pause an alert channel
test_alert_channelread + writeSend a real sample alert to a channel (5/hour)
delete_alert_channelread + writeDelete an alert channel. Marked destructive
update_webhookread + writeChange or pause a webhook

Write tools only appear when the key is read + write.

Example prompts

Dashboard-only

For security these stay in the dashboard and are not available through the API or MCP: billing, plan changes, checkout and invoices; inviting members and changing roles; deleting the agency; creating or revoking API keys; agency branding; and admin operations. Webhook secrets are shown only once, when the webhook is created.

Troubleshooting

Source and registry

Server metadata and client examples are on GitHub at raghuchinnannan/renewroster-mcp, and the server is listed in the official MCP registry as com.renewroster/renewroster.

Prefer plain HTTP? See the REST API docs.