from line 1
1---
2title: List Tunnel Certificates
3url: https://platform.claude.com/docs/en/api/admin/mcp_tunnels/tunnel_certificates/list
4---
1# List Tunnel Certificates
52
6## List Tunnel Certificates
3**GET** `/v1/organizations/tunnels/{tunnel_id}/certificates`
74
8**get** `/v1/organizations/tunnels/{tunnel_id}/certificates`
5**Deprecated**
96
107**Deprecated.** This Admin API endpoint is superseded by `/v1/tunnels` on the Claude API and will be removed after a migration window. New integrations should use [`/v1/tunnels`](/docs/en/api/beta/tunnels) with the `anthropic-beta: mcp-tunnels-2026-06-22` header and a WIF token carrying the `workspace:manage_tunnels` scope. Existing integrations continue to work with the `mcp-tunnels-2026-05-19` header and `org:manage_tunnels` scope during the migration window.
118
from line 10
1310
1411Archived certificates are excluded unless `include_archived` is set.
1512
16### Path Parameters
13## Path parameters
1714
1815- `tunnel_id: string`
1916
2017 ID of the Tunnel.
2118
22### Query Parameters
19## Query parameters
2320
2421- `include_archived: optional boolean`
2522
from line 23
2623 Include archived certificates in the results. Archived certificates are
2724 excluded by default.
2825
26 default: false
27
2928- `limit: optional number`
3029
3130 Maximum number of certificates to return.
3231
32 default: 20, maximum: 1000, minimum: 1
33
3334- `page: optional string`
3435
3536 A tunnel has at most two active certificates, so this list is not
3637 paginated.
3738
38### Header Parameters
39## Headers
3940
4041- `"anthropic-beta": array of "mcp-tunnels-2026-05-19"`
4142
4243 Required for all Tunnel endpoints.
4344
44 - `"mcp-tunnels-2026-05-19"`
45## Returns
4546
46### Returns
47- `data: array of object`
4748
48- `data: array of object { id, archived_at, created_at, 4 more }`
49
5049 - `id: string`
5150
5251 ID of the Tunnel Certificate.
from line 55
5655 RFC 3339 datetime string indicating when the certificate was archived, or
5756 `null` if it is not archived.
5857
58 format: date-time
59
5960 - `created_at: string`
6061
6162 RFC 3339 datetime string indicating when the certificate was registered.
6263
64 format: date-time
65
6366 - `expires_at: string or null`
6467
6568 RFC 3339 datetime string indicating when the certificate expires, or
6669 `null` if it does not expire.
6770
71 format: date-time
72
6873 - `fingerprint: string`
6974
7075 The certificate's SHA-256 fingerprint, as a lowercase hex string.
from line 82
7782
7883 Object type. Always `tunnel_certificate` for Tunnel Certificates.
7984
80 - `"tunnel_certificate"`
85 default: tunnel_certificate
8186
8287- `next_page: string or null`
8388
8489 Opaque cursor for the next page, or `null` if there are no more results.
8590
86### Example
91## Example
8792
88```http
93```bash
8994curl https://api.anthropic.com/v1/organizations/tunnels/$TUNNEL_ID/certificates \
9095 -H 'anthropic-version: 2023-06-01' \
9196 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
9297```
9398
94#### Response
99### Response (200)
95100
96101```json
97102{
No line in this hunk matches that.
