Claude Platform Docs

Créer un certificat de tunnel

$ ant beta:tunnels:certificates create
POST/v1/tunnels/{tunnel_id}/certificates

L'API Tunnels est en « research preview » (aperçu de recherche). Elle nécessite l'en-tête anthropic-beta: mcp-tunnels-2026-06-22 et peut changer sans période de dépréciation. Elle remplace les points de terminaison de l'Admin API situés sous /v1/organizations/tunnels, qui restent disponibles pendant une fenêtre de migration.

Enregistre un certificat d'autorité de certification (CA) public sur un tunnel. Anthropic vérifie le certificat serveur de la passerelle par rapport à cette CA lorsqu'elle termine la session TLS interne. Un tunnel contient au plus deux certificats non archivés.

Parameters
--tunnel-id: string⁠Path parameter

ID of the tunnel (tnl_...).

--ca-certificate-pem: string

PEM-encoded X.509 CA certificate. Must contain exactly one certificate and no private-key material. Maximum 8KB.

maxLength8192
--beta: optional array of AnthropicBeta⁠Header parameter

This endpoint is in beta: requests must send mcp-tunnels-2026-06-22 in this header.

--workspace-id: optional string⁠Header parameter

Optional header to select the Workspace for this request. The value is a Workspace ID (for example, wrkspc_011CZkZaBF1tNoB5wlCeusgy).

Only needed for credentials that can act on more than one Workspace. A credential that belongs to a specific Workspace may omit it; if sent, it must match that Workspace.

Returns
beta_tunnel_certificate: object{ type: "tunnel_certificate", id, archived_at, 4 more }

A CA certificate attached to a tunnel.

type: "tunnel_certificate"
id: string

Unique identifier for the certificate, prefixed with tcrt_.

archived_at: string

RFC 3339 datetime string indicating when the certificate was archived. Null if it is still in the trusted set.

formatdate-time
created_at: string

RFC 3339 datetime string indicating when the certificate was registered.

formatdate-time
expires_at: string

RFC 3339 datetime string indicating when the certificate expires, or null if it does not expire.

formatdate-time
fingerprint: string

Lowercase hex SHA-256 fingerprint of the certificate's DER encoding.

tunnel_id: string

ID of the tunnel the certificate is registered against.

Créer un certificat de tunnel
ant beta:tunnels:certificates create \
  --api-key my-anthropic-api-key \
  --tunnel-id tunnel_id \
  --ca-certificate-pem ca_certificate_pem
Returns Examples
Response 200
{
  "id": "id",
  "archived_at": "2019-12-27T18:11:19.117Z",
  "created_at": "2019-12-27T18:11:19.117Z",
  "expires_at": "2019-12-27T18:11:19.117Z",
  "fingerprint": "fingerprint",
  "tunnel_id": "tunnel_id",
  "type": "tunnel_certificate"
}