diff --git a/.claude/skills/build-plugin/references/ui.md b/.claude/skills/build-plugin/references/ui.md
index b6fb39bb..7a67ad20 100644
--- a/.claude/skills/build-plugin/references/ui.md
+++ b/.claude/skills/build-plugin/references/ui.md
@@ -70,14 +70,18 @@ A **data stream** has its own `ui` array — the **tile-editor parameters** show
 }
 ```
 
-**`ignoreCertificateErrors`** — add to any plugin that may connect to on-prem instances with self-signed certificates:
+**`ignoreCertificateErrors`** — don't add this. The platform adds an "Ignore certificate errors" toggle to every plugin built on WebAPI, and passes the value to the WebAPI base plugin, so you don't need a ui.json field or a `base.config` mapping.
+
+Declaring a field named `ignoreCertificateErrors`, or setting the key in `base.config`, stops the platform adding its toggle. This only hides the option on the form: a value the user supplies (for example through the API) still overrides `base.config`. So only do it for an API where offering the option makes no sense:
 
 ```json
-{
-    "type": "checkbox",
-    "name": "ignoreCertificateErrors",
-    "label": "Ignore certificate errors",
-    "help": "Enable when connecting to an instance with a self-signed certificate."
+"base": {
+    "plugin": "WebAPI",
+    "majorVersion": "1",
+    "config": {
+        "baseUrl": "https://api.example.com",
+        "ignoreCertificateErrors": false
+    }
 }
 ```