Claude Platform Docs

创建隧道证书

beta.tunnels.certificates.create(tunnel_id, **kwargs) -> BetaTunnelCertificate
POST/v1/tunnels/{tunnel_id}/certificates

Tunnels API 目前处于研究预览阶段。它需要 anthropic-beta: mcp-tunnels-2026-06-22 请求头，并且可能在没有弃用期的情况下发生变更。它取代了位于 /v1/organizations/tunnels 的 Admin API 端点，这些端点在迁移窗口期内仍然可用。

在隧道上注册公共 CA 证书。Anthropic 在终止内层 TLS 会话时，会根据此 CA 验证网关的服务器证书。一个隧道最多持有两个未归档的证书。

Parameters
tunnel_id: str⁠Path parameter

ID of the tunnel (tnl_...).

ca_certificate_pem: str

PEM-encoded X.509 CA certificate. Must contain exactly one certificate and no private-key material. Maximum 8KB.

maxLength8192
betas: Optional[List[AnthropicBetaParam]]⁠Header parameter

Optional header to specify the beta version(s) you want to use.

One of the following:
str
"message-batches-2024-09-24"
"prompt-caching-2024-07-31"
"computer-use-2024-10-22"
"computer-use-2025-01-24"
"pdfs-2024-09-25"
"token-counting-2024-11-01"
"token-efficient-tools-2025-02-19"
"output-128k-2025-02-19"
"files-api-2025-04-14"
"mcp-client-2025-04-04"
"mcp-client-2025-11-20"
"dev-full-thinking-2025-05-14"
"interleaved-thinking-2025-05-14"
"code-execution-2025-05-22"
"extended-cache-ttl-2025-04-11"
"context-1m-2025-08-07"
"context-management-2025-06-27"
"model-context-window-exceeded-2025-08-26"
"skills-2025-10-02"
"fast-mode-2026-02-01"
"output-300k-2026-03-24"
"user-profiles-2026-03-24"
"user-profiles-2026-08-18"
"user-profiles-2026-09-04"
"advisor-tool-2026-03-01"
"managed-agents-2026-04-01"
"cache-diagnosis-2026-04-07"
"dreaming-2026-04-21"
"thinking-token-count-2026-05-13"
"server-side-fallback-2026-06-01"
"server-side-fallback-2026-07-01"
"fallback-credit-2026-06-01"
"fallback-credit-2026-07-01"
"agent-memory-2026-07-22"
"mid-conversation-tool-changes-2026-07-01"
"compact-2026-01-12"
"computer-use-2025-11-24"
"mcp-tunnels-2026-06-22"
"structured-outputs-2025-11-13"
"task-budgets-2026-03-13"
"thinking-display-updates-2026-08-18"
"ce-user-management-2026-07-13"
"mid-conversation-output-config-2026-07-01"
"thinking-binding-controls-2026-08-01"
"mid-conversation-system-clear-at-2026-08-21"
"compact-2026-09-04"
"inline-tools-2026-09-15"
"mcp-client-2026-09-15"
"ce-plugins-2026-09-01"
"spend-limit-reads-2026-09-26"
workspace_id: Optional[str]⁠Header parameter

Optional header to select the Workspace for this request. The value is a Workspace ID (for example, wrkspc_011CZkZaBF1tNoB5wlCeusgy).

Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace.

Returns
class BetaTunnelCertificate: type: "tunnel_certificate"; id; archived_at; ... # 4 more

A CA certificate attached to a tunnel.

type: Literal["tunnel_certificate"]
id: str

Unique identifier for the certificate, prefixed with tcrt_.

archived_at: Optional[datetime]

RFC 3339 datetime string indicating when the certificate was archived. Null if it is still in the trusted set.

formatdate-time
created_at: datetime

RFC 3339 datetime string indicating when the certificate was registered.

formatdate-time
expires_at: Optional[datetime]

RFC 3339 datetime string indicating when the certificate expires, or null if it does not expire.

formatdate-time
fingerprint: str

Lowercase hex SHA-256 fingerprint of the certificate's DER encoding.

tunnel_id: str

ID of the tunnel the certificate is registered against.

创建隧道证书
import os
from anthropic import Anthropic

client = Anthropic(
    api_key=os.environ.get(
        "ANTHROPIC_API_KEY"
    ),  # This is the default and can be omitted
)
beta_tunnel_certificate = client.beta.tunnels.certificates.create(
    tunnel_id="tunnel_id",
    ca_certificate_pem="ca_certificate_pem",
)
print(beta_tunnel_certificate.id)
Returns Examples
Response 200
{
  "id": "id",
  "archived_at": "2019-12-27T18:11:19.117Z",
  "created_at": "2019-12-27T18:11:19.117Z",
  "expires_at": "2019-12-27T18:11:19.117Z",
  "fingerprint": "fingerprint",
  "tunnel_id": "tunnel_id",
  "type": "tunnel_certificate"
}