证书 - Claude API Reference

创建隧道证书

BetaTunnelCertificate beta().tunnels().certificates().create(params, requestOptions = RequestOptions.none())

POST/v1/tunnels/{tunnel_id}/certificates

Tunnels API 目前处于研究预览阶段。它需要 anthropic-beta: mcp-tunnels-2026-06-22 请求头，并且可能在没有弃用期的情况下发生变更。它取代了位于 /v1/organizations/tunnels 的 Admin API 端点，这些端点在迁移窗口期内仍然可用。

获取隧道证书

BetaTunnelCertificate beta().tunnels().certificates().retrieve(params, requestOptions = RequestOptions.none())

GET/v1/tunnels/{tunnel_id}/certificates/{certificate_id}

列出隧道证书

CertificateListPage beta().tunnels().certificates().list(params = CertificateListParams.none(), requestOptions = RequestOptions.none())

GET/v1/tunnels/{tunnel_id}/certificates

归档隧道证书

BetaTunnelCertificate beta().tunnels().certificates().archive(params, requestOptions = RequestOptions.none())

POST/v1/tunnels/{tunnel_id}/certificates/{certificate_id}/archive

Models

class BetaTunnelCertificate { type = "tunnel_certificate"; id; archivedAt; /* 4 more */ }

A CA certificate attached to a tunnel.

JsonValue type = "tunnel_certificate"

String id

Unique identifier for the certificate, prefixed with tcrt_.

Optional<LocalDateTime> archivedAt

RFC 3339 datetime string indicating when the certificate was archived. Null if it is still in the trusted set.

formatdate-time

LocalDateTime createdAt

RFC 3339 datetime string indicating when the certificate was registered.

formatdate-time

Optional<LocalDateTime> expiresAt

RFC 3339 datetime string indicating when the certificate expires, or null if it does not expire.

formatdate-time

String fingerprint

Lowercase hex SHA-256 fingerprint of the certificate's DER encoding.

String tunnelId

ID of the tunnel the certificate is registered against.