Create Tunnel Certificate
api/beta/tunnels/certificates/create
Nearest release: v2.1.245, published an hour after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
api/beta/tunnels/certificates/create Changed · +18 / -17 lines
# Create Tunnel Certificate ## Path parameters ## Headers ## Body parameters ## Returns ## Example ### Response (200) ## Create Tunnel Certificate ### Path Parameters ### Header Parameters ### Body Parameters ### Returns ### Example #### Response
---- -title: Create Tunnel Certificate -url: https://platform.claude.com/docs/en/api/beta/tunnels/certificates/create ---- +# Create Tunnel Certificate -## Create Tunnel Certificate +**POST** `/v1/tunnels/{tunnel_id}/certificates` -**post** `/v1/tunnels/{tunnel_id}/certificates` - The Tunnels API is in research preview. It requires the `anthropic-beta: mcp-tunnels-2026-06-22` header and may change without a deprecation period. It supersedes the Admin API endpoints at `/v1/organizations/tunnels`, which remain available during a migration window. Registers a public CA certificate on a tunnel. Anthropic verifies the gateway's server certificate against this CA when it terminates the inner TLS session. A tunnel holds at most two non-archived certificates. -### Path Parameters +## Path parameters - `tunnel_id: string` -### Header Parameters +## Headers - `"anthropic-beta": optional array of AnthropicBeta`
- `"mid-conversation-tool-changes-2026-07-01"` -### Body Parameters +## Body parameters - `ca_certificate_pem: string` PEM-encoded X.509 CA certificate. Must contain exactly one certificate and no private-key material. Maximum 8KB. -### Returns + maxLength: 8192 -- `BetaTunnelCertificate object { id, archived_at, created_at, 4 more }` +## Returns +- `BetaTunnelCertificate object` + A CA certificate attached to a tunnel. - `id: string`
A timestamp in RFC 3339 format + format: date-time + - `created_at: string` A timestamp in RFC 3339 format + format: date-time + - `expires_at: string or null` A timestamp in RFC 3339 format + format: date-time + - `fingerprint: string` Lowercase hex SHA-256 fingerprint of the certificate's DER encoding.
- `type: "tunnel_certificate"` - - `"tunnel_certificate"` +## Example -### Example - -```http +```bash curl https://api.anthropic.com/v1/tunnels/$TUNNEL_ID/certificates \ -H 'Content-Type: application/json' \ -H 'anthropic-version: 2023-06-01' \
}' ``` -#### Response +### Response (200) ```json {