憑證 - Claude API Reference

建立通道憑證

client.Beta.Tunnels.Certificates.New(ctx, tunnelID, params) (*BetaTunnelCertificate, error)

POST/v1/tunnels/{tunnel_id}/certificates

Tunnels API 目前為研究預覽版。它需要 anthropic-beta: mcp-tunnels-2026-06-22 標頭，且可能在沒有棄用期的情況下變更。它取代了位於 /v1/organizations/tunnels 的 Admin API 端點，這些端點在遷移期間內仍可使用。

取得通道憑證

client.Beta.Tunnels.Certificates.Get(ctx, certificateID, params) (*BetaTunnelCertificate, error)

GET/v1/tunnels/{tunnel_id}/certificates/{certificate_id}

列出通道憑證

client.Beta.Tunnels.Certificates.List(ctx, tunnelID, params) (*PageCursor[BetaTunnelCertificate], error)

GET/v1/tunnels/{tunnel_id}/certificates

封存通道憑證

client.Beta.Tunnels.Certificates.Archive(ctx, certificateID, params) (*BetaTunnelCertificate, error)

POST/v1/tunnels/{tunnel_id}/certificates/{certificate_id}/archive

Models

type BetaTunnelCertificate struct { Type: "tunnel_certificate"; ID; ArchivedAt; /* 4 more */ }

A CA certificate attached to a tunnel.

Type TunnelCertificate

ID string

Unique identifier for the certificate, prefixed with tcrt_.

ArchivedAt Time

RFC 3339 datetime string indicating when the certificate was archived. Null if it is still in the trusted set.

formatdate-time

CreatedAt Time

RFC 3339 datetime string indicating when the certificate was registered.

formatdate-time

ExpiresAt Time

RFC 3339 datetime string indicating when the certificate expires, or null if it does not expire.

formatdate-time

Fingerprint string

Lowercase hex SHA-256 fingerprint of the certificate's DER encoding.

TunnelID string

ID of the tunnel the certificate is registered against.