> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pcnaid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# KeylessSSL

> Documentation for managing delegated domain validation and Cloudflare for SaaS certificates with KeylessSSL.

# KeylessSSL

## What does this do for me?

KeylessSSL manages delegated domain control validation and requests certificates through Cloudflare for SaaS Custom Hostnames. You add the DNS records shown for a domain, verify control, and request a certificate without giving KeylessSSL's portal your DNS-provider credentials.

The authenticated portal contains screens for domains, certificates, API keys, webhooks, audit events, usage, and organization settings.

> **[Use KeylessSSL](https://docs.pcnaid.com/nodes/web-apps/keylessssl/merchant.md)**
>
> Add a domain, publish its DNS records, verify it, and monitor its certificate.

> **[Integrate the API](https://docs.pcnaid.com/nodes/web-apps/keylessssl/developer)**
>
> Review the service architecture, authentication model, and implemented HTTP routes.

> **[Work as a partner](https://docs.pcnaid.com/nodes/web-apps/keylessssl/partner)**
>
> See the collaboration model that is verified in the application.

## Verified workflow

1. Sign in through the portal's Auth0 flow.
2. Add a base domain.
3. Publish the tenant-specific ownership TXT record and the delegated-validation CNAME shown by the portal.
4. Ask KeylessSSL to verify the DNS records.
5. Open the verified domain and request certificate issuance.
6. Monitor provider status from the Domains and Certificates screens.

KeylessSSL treats the ownership TXT record as proof that the current organization controls the domain. The delegation CNAME is separately required for certificate issuance.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.