MCP Tunnels changedapi/admin/mcp_tunnels
Nearest release: v2.1.245, published an hour after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+174added
Lines−265removed
From line
1
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits5to this page, all time
### Path parameters ### Headers #### Response (200) ### Query parameters ### Headers #### Response (200) ### Path parameters ### Headers #### Response (200) ### Path parameters ### Headers ### Body parameters #### Response (200) ### Path parameters ### Headers #### Response (200) ## Domain types ## MCP Tunnels › Tunnel Certificates ### Create Tunnel Certificate #### Path parameters #### Headers #### Body parameters #### Returns #### Example ##### Response (200) ### Get Tunnel Certificate #### Path parameters #### Headers #### Returns #### Example ##### Response (200) ### List Tunnel Certificates #### Path parameters #### Query parameters #### Headers #### Returns #### Example ##### Response (200) ### Archive Tunnel Certificate #### Path parameters #### Headers #### Returns #### Example ##### Response (200) ### Path Parameters ### Header Parameters #### Response ### Query Parameters ### Header Parameters #### Response ### Path Parameters ### Header Parameters #### Response ### Path Parameters ### Header Parameters ### Body Parameters #### Response ### Path Parameters ### Header Parameters #### Response ## Domain Types # Tunnel Certificates ## Create Tunnel Certificate ### Path Parameters ### Header Parameters ### Body Parameters #### Response ## Get Tunnel Certificate ### Path Parameters ### Header Parameters #### Response ## List Tunnel Certificates ### Path Parameters ### Query Parameters ### Header Parameters #### Response ## Archive Tunnel Certificate ### Path Parameters ### Header Parameters #### Response ## Domain Types ### Tunnel Certificate Create Response ### Tunnel Certificate Retrieve Response ### Tunnel Certificate List Response ### Tunnel Certificate Archive Response
The whole hunk
from line 1, old and new numbered
/
The two sides of this change are more than 400 edits apart, too far apart to line up, so this is the differ's own diff of it and the words inside a line are not marked.
from line 1
1---
2title: MCP Tunnels
3url: https://platform.claude.com/docs/en/api/admin/mcp_tunnels
4---
5
61# MCP Tunnels
72
83## Get Tunnel
94
10**get** `/v1/organizations/tunnels/{tunnel_id}`
5**GET** `/v1/organizations/tunnels/{tunnel_id}`
6
7**Deprecated**
118
129**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.
1310
1411Retrieve a single tunnel in the caller's organization by ID.
1512
16### Path Parameters
13### Path parameters
1714
1815- `tunnel_id: string`
1916
2017 ID of the Tunnel.
2118
22### Header Parameters
19### Headers
2320
2421- `"anthropic-beta": array of "mcp-tunnels-2026-05-19"`
2522
2623 Required for all Tunnel endpoints.
27
28 - `"mcp-tunnels-2026-05-19"`
2924
3025### Returns
3126
from line 33
3833 RFC 3339 datetime string indicating when the Tunnel was archived, or
3934 `null` if it is not archived.
4035
36 format: date-time
37
4138- `created_at: string`
4239
4340 RFC 3339 datetime string indicating when the Tunnel was created.
41
42 format: date-time
4443
4544- `display_name: string or null`
4645
from line 55
5655
5756 Object type. Always `tunnel` for Tunnels.
5857
59 - `"tunnel"`
58 default: tunnel
6059
6160- `workspace_id: string or null`
6261
from line 64
6564
6665### Example
6766
68```http
67```bash
6968curl https://api.anthropic.com/v1/organizations/tunnels/$TUNNEL_ID \
7069 -H 'anthropic-version: 2023-06-01' \
7170 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
7271```
7372
74#### Response
73#### Response (200)
7574
7675```json
7776{
from line 86
8786
8887## List Tunnels
8988
90**get** `/v1/organizations/tunnels`
89**GET** `/v1/organizations/tunnels`
90
91**Deprecated**
9192
9293**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.
9394
from line 98
9798(newest first). Use `workspace_id` to filter to a single workspace;
9899archived tunnels are excluded unless `include_archived` is set.
99100
100### Query Parameters
101### Query parameters
101102
102103- `include_archived: optional boolean`
103104
104105 Include archived tunnels in the results. Archived tunnels are excluded by
105106 default.
106107
108 default: false
109
107110- `limit: optional number`
108111
109112 Maximum number of tunnels to return in a single page.
113
114 default: 20, maximum: 1000, minimum: 1
110115
111116- `page: optional string`
112117
from line 123
118123 Return only tunnels in this Workspace. Accepts a `wrkspc_`-prefixed
119124 Workspace ID; omit to list tunnels across all Workspaces.
120125
121### Header Parameters
126### Headers
122127
123128- `"anthropic-beta": array of "mcp-tunnels-2026-05-19"`
124129
125130 Required for all Tunnel endpoints.
126131
127 - `"mcp-tunnels-2026-05-19"`
128
129132### Returns
130133
131- `data: array of object { id, archived_at, created_at, 4 more }`
134- `data: array of object`
132135
133136 - `id: string`
134137
from line 142
139142 RFC 3339 datetime string indicating when the Tunnel was archived, or
140143 `null` if it is not archived.
141144
145 format: date-time
146
142147 - `created_at: string`
143148
144149 RFC 3339 datetime string indicating when the Tunnel was created.
150
151 format: date-time
145152
146153 - `display_name: string or null`
147154
from line 164
157164
158165 Object type. Always `tunnel` for Tunnels.
159166
160 - `"tunnel"`
167 default: tunnel
161168
162169 - `workspace_id: string or null`
163170
from line 177
170177
171178### Example
172179
173```http
180```bash
174181curl https://api.anthropic.com/v1/organizations/tunnels \
175182 -H 'anthropic-version: 2023-06-01' \
176183 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
177184```
178185
179#### Response
186#### Response (200)
180187
181188```json
182189{
from line 204
197204
198205## Reveal Tunnel Token
199206
200**post** `/v1/organizations/tunnels/{tunnel_id}/reveal_token`
207**POST** `/v1/organizations/tunnels/{tunnel_id}/reveal_token`
208
209**Deprecated**
201210
202211**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.
203212
from line 217
208217Exposed as `POST` so the token does not appear in intermediary
209218access logs.
210219
211### Path Parameters
220### Path parameters
212221
213222- `tunnel_id: string`
214223
215224 ID of the Tunnel.
216225
217### Header Parameters
226### Headers
218227
219228- `"anthropic-beta": array of "mcp-tunnels-2026-05-19"`
220229
221230 Required for all Tunnel endpoints.
222
223 - `"mcp-tunnels-2026-05-19"`
224231
225232### Returns
226233
from line 244
237244
238245 Object type. Always `tunnel_token` for Tunnel Tokens.
239246
240 - `"tunnel_token"`
247 default: tunnel_token
241248
242249### Example
243250
244```http
251```bash
245252curl https://api.anthropic.com/v1/organizations/tunnels/$TUNNEL_ID/reveal_token \
246253 -X POST \
247254 -H 'anthropic-version: 2023-06-01' \
248255 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
249256```
250257
251#### Response
258#### Response (200)
252259
253260```json
254261{
from line 267
260267
261268## Rotate Tunnel Token
262269
263**post** `/v1/organizations/tunnels/{tunnel_id}/rotate_token`
270**POST** `/v1/organizations/tunnels/{tunnel_id}/rotate_token`
271
272**Deprecated**
264273
265274**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.
266275
from line 279
270279restarted after rotation must use the new value. An optional
271280`reason` is captured for operational context.
272281
273### Path Parameters
282### Path parameters
274283
275284- `tunnel_id: string`
276285
277286 ID of the Tunnel.
278287
279### Header Parameters
288### Headers
280289
281290- `"anthropic-beta": array of "mcp-tunnels-2026-05-19"`
282291
283292 Required for all Tunnel endpoints.
284293
285 - `"mcp-tunnels-2026-05-19"`
286
287### Body Parameters
294### Body parameters
288295
289296- `reason: optional string or null`
290297
291298 Optional free-text reason for the rotation, recorded for audit.
299
300 maxLength: 1024
292301
293302### Returns
294303
from line 314
305314
306315 Object type. Always `tunnel_token` for Tunnel Tokens.
307316
308 - `"tunnel_token"`
317 default: tunnel_token
309318
310319### Example
311320
312```http
321```bash
313322curl https://api.anthropic.com/v1/organizations/tunnels/$TUNNEL_ID/rotate_token \
314323 -X POST \
315324 -H 'anthropic-version: 2023-06-01' \
316325 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
317326```
318327
319#### Response
328#### Response (200)
320329
321330```json
322331{
from line 337
328337
329338## Archive Tunnel
330339
331**post** `/v1/organizations/tunnels/{tunnel_id}/archive`
340**POST** `/v1/organizations/tunnels/{tunnel_id}/archive`
341
342**Deprecated**
332343
333344**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.
334345
from line 350
339350tunnel token is invalidated. Retrying against an already-archived
340351tunnel returns the existing record unchanged.
341352
342### Path Parameters
353### Path parameters
343354
344355- `tunnel_id: string`
345356
346357 ID of the Tunnel.
347358
348### Header Parameters
359### Headers
349360
350361- `"anthropic-beta": array of "mcp-tunnels-2026-05-19"`
351362
352363 Required for all Tunnel endpoints.
353
354 - `"mcp-tunnels-2026-05-19"`
355364
356365### Returns
357366
from line 373
364373 RFC 3339 datetime string indicating when the Tunnel was archived, or
365374 `null` if it is not archived.
366375
376 format: date-time
377
367378- `created_at: string`
368379
369380 RFC 3339 datetime string indicating when the Tunnel was created.
381
382 format: date-time
370383
371384- `display_name: string or null`
372385
from line 395
382395
383396 Object type. Always `tunnel` for Tunnels.
384397
385 - `"tunnel"`
398 default: tunnel
386399
387400- `workspace_id: string or null`
388401
from line 404
391404
392405### Example
393406
394```http
407```bash
395408curl https://api.anthropic.com/v1/organizations/tunnels/$TUNNEL_ID/archive \
396409 -X POST \
397410 -H 'anthropic-version: 2023-06-01' \
398411 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
399412```
400413
401#### Response
414#### Response (200)
402415
403416```json
404417{
from line 425
412425}
413426```
414427
415## Domain Types
428## Domain types
416429
417430### MCP Tunnel Retrieve Response
418431
419- `MCPTunnelRetrieveResponse object { id, archived_at, created_at, 4 more }`
432- `MCPTunnelRetrieveResponse object`
420433
421434 - `id: string`
422435
from line 440
427440 RFC 3339 datetime string indicating when the Tunnel was archived, or
428441 `null` if it is not archived.
429442
443 format: date-time
444
430445 - `created_at: string`
431446
432447 RFC 3339 datetime string indicating when the Tunnel was created.
448
449 format: date-time
433450
434451 - `display_name: string or null`
435452
from line 462
445462
446463 Object type. Always `tunnel` for Tunnels.
447464
448 - `"tunnel"`
465 default: tunnel
449466
450467 - `workspace_id: string or null`
451468
from line 471
454471
455472### MCP Tunnel List Response
456473
457- `MCPTunnelListResponse object { id, archived_at, created_at, 4 more }`
474- `MCPTunnelListResponse object`
458475
459476 - `id: string`
460477
from line 482
465482 RFC 3339 datetime string indicating when the Tunnel was archived, or
466483 `null` if it is not archived.
467484
485 format: date-time
486
468487 - `created_at: string`
469488
470489 RFC 3339 datetime string indicating when the Tunnel was created.
490
491 format: date-time
471492
472493 - `display_name: string or null`
473494
from line 504
483504
484505 Object type. Always `tunnel` for Tunnels.
485506
486 - `"tunnel"`
507 default: tunnel
487508
488509 - `workspace_id: string or null`
489510
from line 513
492513
493514### MCP Tunnel Reveal Token Response
494515
495- `MCPTunnelRevealTokenResponse object { id, tunnel_token, type }`
516- `MCPTunnelRevealTokenResponse object`
496517
497518 - `id: string`
498519
from line 528
507528
508529 Object type. Always `tunnel_token` for Tunnel Tokens.
509530
510 - `"tunnel_token"`
531 default: tunnel_token
511532
512533### MCP Tunnel Rotate Token Response
513534
514- `MCPTunnelRotateTokenResponse object { id, tunnel_token, type }`
535- `MCPTunnelRotateTokenResponse object`
515536
516537 - `id: string`
517538
from line 547
526547
527548 Object type. Always `tunnel_token` for Tunnel Tokens.
528549
529 - `"tunnel_token"`
550 default: tunnel_token
530551
531552### MCP Tunnel Archive Response
532553
533- `MCPTunnelArchiveResponse object { id, archived_at, created_at, 4 more }`
554- `MCPTunnelArchiveResponse object`
534555
535556 - `id: string`
536557
from line 562
541562 RFC 3339 datetime string indicating when the Tunnel was archived, or
542563 `null` if it is not archived.
543564
565 format: date-time
566
544567 - `created_at: string`
545568
546569 RFC 3339 datetime string indicating when the Tunnel was created.
570
571 format: date-time
547572
548573 - `display_name: string or null`
549574
from line 584
559584
560585 Object type. Always `tunnel` for Tunnels.
561586
562 - `"tunnel"`
587 default: tunnel
563588
564589 - `workspace_id: string or null`
565590
566591 ID of the Workspace this Tunnel belongs to, or `null` for the default
567592 Workspace. Immutable after creation.
568593
569# Tunnel Certificates
570
571## Create Tunnel Certificate
572
573**post** `/v1/organizations/tunnels/{tunnel_id}/certificates`
594## MCP Tunnels › Tunnel Certificates
595
596### Create Tunnel Certificate
597
598**POST** `/v1/organizations/tunnels/{tunnel_id}/certificates`
599
600**Deprecated**
574601
575602**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.
576603
from line 608
581608exactly one X.509 certificate and no private-key material. A tunnel
582609holds at most two non-archived certificates.
583610
584### Path Parameters
611#### Path parameters
585612
586613- `tunnel_id: string`
587614
588615 ID of the Tunnel.
589616
590### Header Parameters
617#### Headers
591618
592619- `"anthropic-beta": array of "mcp-tunnels-2026-05-19"`
593620
594621 Required for all Tunnel endpoints.
595622
596 - `"mcp-tunnels-2026-05-19"`
597
598### Body Parameters
623#### Body parameters
599624
600625- `ca_certificate_pem: string`
601626
602627 PEM-encoded X.509 CA certificate. Must contain exactly one certificate and
603628 no private-key material.
604629
605### Returns
630 maxLength: 8192
631
632#### Returns
606633
607634- `id: string`
608635
from line 640
613640 RFC 3339 datetime string indicating when the certificate was archived, or
614641 `null` if it is not archived.
615642
643 format: date-time
644
616645- `created_at: string`
617646
618647 RFC 3339 datetime string indicating when the certificate was registered.
648
649 format: date-time
619650
620651- `expires_at: string or null`
621652
622653 RFC 3339 datetime string indicating when the certificate expires, or
623654 `null` if it does not expire.
624655
656 format: date-time
657
625658- `fingerprint: string`
626659
627660 The certificate's SHA-256 fingerprint, as a lowercase hex string.
from line 667
634667
635668 Object type. Always `tunnel_certificate` for Tunnel Certificates.
636669
637 - `"tunnel_certificate"`
638
639### Example
640
641```http
670 default: tunnel_certificate
671
672#### Example
673
674```bash
642675curl https://api.anthropic.com/v1/organizations/tunnels/$TUNNEL_ID/certificates \
643676 -H 'Content-Type: application/json' \
644677 -H 'anthropic-version: 2023-06-01' \
from line 681
648681 }'
649682```
650683
651#### Response
684##### Response (200)
652685
653686```json
654687{
from line 695
662695}
663696```
664697
665## Get Tunnel Certificate
666
667**get** `/v1/organizations/tunnels/{tunnel_id}/certificates/{certificate_id}`
698### Get Tunnel Certificate
699
700**GET** `/v1/organizations/tunnels/{tunnel_id}/certificates/{certificate_id}`
701
702**Deprecated**
668703
669704**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.
670705
671706Retrieve a single certificate registered on a tunnel by ID.
672707
673### Path Parameters
708#### Path parameters
674709
675710- `tunnel_id: string`
676711
from line 715
680715
681716 ID of the Tunnel Certificate.
682717
683### Header Parameters
718#### Headers
684719
685720- `"anthropic-beta": array of "mcp-tunnels-2026-05-19"`
686721
687722 Required for all Tunnel endpoints.
688723
689 - `"mcp-tunnels-2026-05-19"`
690
691### Returns
724#### Returns
692725
693726- `id: string`
694727
from line 732
699732 RFC 3339 datetime string indicating when the certificate was archived, or
700733 `null` if it is not archived.
701734
735 format: date-time
736
702737- `created_at: string`
703738
704739 RFC 3339 datetime string indicating when the certificate was registered.
740
741 format: date-time
705742
706743- `expires_at: string or null`
707744
708745 RFC 3339 datetime string indicating when the certificate expires, or
709746 `null` if it does not expire.
710747
748 format: date-time
749
711750- `fingerprint: string`
712751
713752 The certificate's SHA-256 fingerprint, as a lowercase hex string.
from line 759
720759
721760 Object type. Always `tunnel_certificate` for Tunnel Certificates.
722761
723 - `"tunnel_certificate"`
724
725### Example
726
727```http
762 default: tunnel_certificate
763
764#### Example
765
766```bash
728767curl https://api.anthropic.com/v1/organizations/tunnels/$TUNNEL_ID/certificates/$CERTIFICATE_ID \
729768 -H 'anthropic-version: 2023-06-01' \
730769 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
731770```
732771
733#### Response
772##### Response (200)
734773
735774```json
736775{
from line 783
744783}
745784```
746785
747## List Tunnel Certificates
748
749**get** `/v1/organizations/tunnels/{tunnel_id}/certificates`
786### List Tunnel Certificates
787
788**GET** `/v1/organizations/tunnels/{tunnel_id}/certificates`
789
790**Deprecated**
750791
751792**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.
752793
from line 795
754795
755796Archived certificates are excluded unless `include_archived` is set.
756797
757### Path Parameters
798#### Path parameters
758799
759800- `tunnel_id: string`
760801
761802 ID of the Tunnel.
762803
763### Query Parameters
804#### Query parameters
764805
765806- `include_archived: optional boolean`
766807
767808 Include archived certificates in the results. Archived certificates are
768809 excluded by default.
769810
811 default: false
812
770813- `limit: optional number`
771814
772815 Maximum number of certificates to return.
816
817 default: 20, maximum: 1000, minimum: 1
773818
774819- `page: optional string`
775820
776821 A tunnel has at most two active certificates, so this list is not
777822 paginated.
778823
779### Header Parameters
824#### Headers
780825
781826- `"anthropic-beta": array of "mcp-tunnels-2026-05-19"`
782827
783828 Required for all Tunnel endpoints.
784829
785 - `"mcp-tunnels-2026-05-19"`
786
787### Returns
788
789- `data: array of object { id, archived_at, created_at, 4 more }`
830#### Returns
831
832- `data: array of object`
790833
791834 - `id: string`
792835
from line 840
797840 RFC 3339 datetime string indicating when the certificate was archived, or
798841 `null` if it is not archived.
799842
843 format: date-time
844
800845 - `created_at: string`
801846
802847 RFC 3339 datetime string indicating when the certificate was registered.
848
849 format: date-time
803850
804851 - `expires_at: string or null`
805852
806853 RFC 3339 datetime string indicating when the certificate expires, or
807854 `null` if it does not expire.
808855
856 format: date-time
857
809858 - `fingerprint: string`
810859
811860 The certificate's SHA-256 fingerprint, as a lowercase hex string.
from line 867
818867
819868 Object type. Always `tunnel_certificate` for Tunnel Certificates.
820869
821 - `"tunnel_certificate"`
870 default: tunnel_certificate
822871
823872- `next_page: string or null`
824873
825874 Opaque cursor for the next page, or `null` if there are no more results.
826875
827### Example
828
829```http
876#### Example
877
878```bash
830879curl https://api.anthropic.com/v1/organizations/tunnels/$TUNNEL_ID/certificates \
831880 -H 'anthropic-version: 2023-06-01' \
832881 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
833882```
834883
835#### Response
884##### Response (200)
836885
837886```json
838887{
from line 900
851900}
852901```
853902
854## Archive Tunnel Certificate
855
856**post** `/v1/organizations/tunnels/{tunnel_id}/certificates/{certificate_id}/archive`
903### Archive Tunnel Certificate
904
905**POST** `/v1/organizations/tunnels/{tunnel_id}/certificates/{certificate_id}/archive`
906
907**Deprecated**
857908
858909**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.
859910
from line 914
863914certificate is permitted; the tunnel rejects MCP traffic until a new
864915certificate is added.
865916
866### Path Parameters
917#### Path parameters
867918
868919- `tunnel_id: string`
869920
from line 924
873924
874925 ID of the Tunnel Certificate.
875926
876### Header Parameters
927#### Headers
877928
878929- `"anthropic-beta": array of "mcp-tunnels-2026-05-19"`
879930
880931 Required for all Tunnel endpoints.
881932
882 - `"mcp-tunnels-2026-05-19"`
883
884### Returns
933#### Returns
885934
886935- `id: string`
887936
from line 941
892941 RFC 3339 datetime string indicating when the certificate was archived, or
893942 `null` if it is not archived.
894943
944 format: date-time
945
895946- `created_at: string`
896947
897948 RFC 3339 datetime string indicating when the certificate was registered.
949
950 format: date-time
898951
899952- `expires_at: string or null`
900953
901954 RFC 3339 datetime string indicating when the certificate expires, or
902955 `null` if it does not expire.
903956
957 format: date-time
958
904959- `fingerprint: string`
905960
906961 The certificate's SHA-256 fingerprint, as a lowercase hex string.
from line 968
913968
914969 Object type. Always `tunnel_certificate` for Tunnel Certificates.
915970
916 - `"tunnel_certificate"`
917
918### Example
919
920```http
971 default: tunnel_certificate
972
973#### Example
974
975```bash
921976curl https://api.anthropic.com/v1/organizations/tunnels/$TUNNEL_ID/certificates/$CERTIFICATE_ID/archive \
922977 -X POST \
923978 -H 'anthropic-version: 2023-06-01' \
924979 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
925980```
926981
927#### Response
982##### Response (200)
928983
929984```json
930985{
from line 992
937992 "type": "tunnel_certificate"
938993}
939994```
940
941## Domain Types
942
943### Tunnel Certificate Create Response
944
945- `TunnelCertificateCreateResponse object { id, archived_at, created_at, 4 more }`
946
947 - `id: string`
948
949 ID of the Tunnel Certificate.
950
951 - `archived_at: string or null`
952
953 RFC 3339 datetime string indicating when the certificate was archived, or
954 `null` if it is not archived.
955
956 - `created_at: string`
957
958 RFC 3339 datetime string indicating when the certificate was registered.
959
960 - `expires_at: string or null`
961
962 RFC 3339 datetime string indicating when the certificate expires, or
963 `null` if it does not expire.
964
965 - `fingerprint: string`
966
967 The certificate's SHA-256 fingerprint, as a lowercase hex string.
968
969 - `tunnel_id: string`
970
971 ID of the Tunnel this certificate is registered against.
972
973 - `type: "tunnel_certificate"`
974
975 Object type. Always `tunnel_certificate` for Tunnel Certificates.
976
977 - `"tunnel_certificate"`
978
979### Tunnel Certificate Retrieve Response
980
981- `TunnelCertificateRetrieveResponse object { id, archived_at, created_at, 4 more }`
982
983 - `id: string`
984
985 ID of the Tunnel Certificate.
986
987 - `archived_at: string or null`
988
989 RFC 3339 datetime string indicating when the certificate was archived, or
990 `null` if it is not archived.
991
992 - `created_at: string`
993
994 RFC 3339 datetime string indicating when the certificate was registered.
995
996 - `expires_at: string or null`
997
998 RFC 3339 datetime string indicating when the certificate expires, or
999 `null` if it does not expire.
1000
1001 - `fingerprint: string`
1002
1003 The certificate's SHA-256 fingerprint, as a lowercase hex string.
1004
1005 - `tunnel_id: string`
1006
1007 ID of the Tunnel this certificate is registered against.
1008
1009 - `type: "tunnel_certificate"`
1010
1011 Object type. Always `tunnel_certificate` for Tunnel Certificates.
1012
1013 - `"tunnel_certificate"`
1014
1015### Tunnel Certificate List Response
1016
1017- `TunnelCertificateListResponse object { id, archived_at, created_at, 4 more }`
1018
1019 - `id: string`
1020
1021 ID of the Tunnel Certificate.
1022
1023 - `archived_at: string or null`
1024
1025 RFC 3339 datetime string indicating when the certificate was archived, or
1026 `null` if it is not archived.
1027
1028 - `created_at: string`
1029
1030 RFC 3339 datetime string indicating when the certificate was registered.
1031
1032 - `expires_at: string or null`
1033
1034 RFC 3339 datetime string indicating when the certificate expires, or
1035 `null` if it does not expire.
1036
1037 - `fingerprint: string`
1038
1039 The certificate's SHA-256 fingerprint, as a lowercase hex string.
1040
1041 - `tunnel_id: string`
1042
1043 ID of the Tunnel this certificate is registered against.
1044
1045 - `type: "tunnel_certificate"`
1046
1047 Object type. Always `tunnel_certificate` for Tunnel Certificates.
1048
1049 - `"tunnel_certificate"`
1050
1051### Tunnel Certificate Archive Response
1052
1053- `TunnelCertificateArchiveResponse object { id, archived_at, created_at, 4 more }`
1054
1055 - `id: string`
1056
1057 ID of the Tunnel Certificate.
1058
1059 - `archived_at: string or null`
1060
1061 RFC 3339 datetime string indicating when the certificate was archived, or
1062 `null` if it is not archived.
1063
1064 - `created_at: string`
1065
1066 RFC 3339 datetime string indicating when the certificate was registered.
1067
1068 - `expires_at: string or null`
1069
1070 RFC 3339 datetime string indicating when the certificate expires, or
1071 `null` if it does not expire.
1072
1073 - `fingerprint: string`
1074
1075 The certificate's SHA-256 fingerprint, as a lowercase hex string.
1076
1077 - `tunnel_id: string`
1078
1079 ID of the Tunnel this certificate is registered against.
1080
1081 - `type: "tunnel_certificate"`
1082
1083 Object type. Always `tunnel_certificate` for Tunnel Certificates.
1084
1085 - `"tunnel_certificate"`
1086995
No line in this hunk matches that.