Every socket is on a domain you own. slash.tools never hosts your traffic, so there's nothing to point at us — the record goes straight to your server.
- Fly.io, Railway, Render: add the domain in the platform, then create the CNAME (or A/AAAA) records it shows at your DNS provider. The platform serves TLS.
- A VPS: an A record to the server's IP, and Caddy (VPS + Caddy) gets the certificate.
- Your Mac: Dashboard → Socket can keep a Vercel domain's A record on your Mac's IP (DNS Forwarding), or use any DNS plus port forwarding — or a tunnel for TLS.
Use wss:// from https pages — browsers block plain ws:// there. Then lock the socket to your site with "origins": ["https://example.com"] in the manifest.