Claude Platform Docs

Certificates

Create Tunnel Certificate
BetaTunnelCertificate Beta.Tunnels.Certificates.Create(parameters, cancellationToken = default)
POST/v1/tunnels/{tunnel_id}/certificates

The Tunnels API is in research preview. It requires the anthropic-beta: mcp-tunnels-2026-06-22 header and may change without a deprecation period. It supersedes the Admin API endpoints at /v1/organizations/tunnels, which remain available during a migration window.

Get Tunnel Certificate
BetaTunnelCertificate Beta.Tunnels.Certificates.Retrieve(parameters, cancellationToken = default)
GET/v1/tunnels/{tunnel_id}/certificates/{certificate_id}

The Tunnels API is in research preview. It requires the anthropic-beta: mcp-tunnels-2026-06-22 header and may change without a deprecation period. It supersedes the Admin API endpoints at /v1/organizations/tunnels, which remain available during a migration window.

List Tunnel Certificates
CertificateListPage Beta.Tunnels.Certificates.List(parameters, cancellationToken = default)
GET/v1/tunnels/{tunnel_id}/certificates

The Tunnels API is in research preview. It requires the anthropic-beta: mcp-tunnels-2026-06-22 header and may change without a deprecation period. It supersedes the Admin API endpoints at /v1/organizations/tunnels, which remain available during a migration window.

Archive Tunnel Certificate
BetaTunnelCertificate Beta.Tunnels.Certificates.Archive(parameters, cancellationToken = default)
POST/v1/tunnels/{tunnel_id}/certificates/{certificate_id}/archive

The Tunnels API is in research preview. It requires the anthropic-beta: mcp-tunnels-2026-06-22 header and may change without a deprecation period. It supersedes the Admin API endpoints at /v1/organizations/tunnels, which remain available during a migration window.

Models
class BetaTunnelCertificate { Type = "tunnel_certificate"; ID; ArchivedAt; /* 4 more */ }

A CA certificate attached to a tunnel.

JsonElement Type = "tunnel_certificate"
required string ID

Unique identifier for the certificate, prefixed with tcrt_.

required DateTimeOffset? ArchivedAt

A timestamp in RFC 3339 format

formatdate-time
required DateTimeOffset CreatedAt

A timestamp in RFC 3339 format

formatdate-time
required DateTimeOffset? ExpiresAt

A timestamp in RFC 3339 format

formatdate-time
required string Fingerprint

Lowercase hex SHA-256 fingerprint of the certificate's DER encoding.

required string TunnelID

ID of the tunnel the certificate is registered against.