Skip to main content

Show where a certificate was observed

GET 
/api/v1/operator/certificates/:identityId/observations

Returns observed locations with presence state (confirmed present, confirmed absent or unknown), evidence kind and freshness reason. Deployment paths and references are never returned. The source returns at most 20 locations per certificate; a longer list is reported as truncated with no cursor. Authenticated only with an operator connection credential holding the mcp:certs:read scope; the workspace comes from the connection. Response shape: packages/contracts/mcp/mcp-read-tools.schema.json definition tt_get_certificate_observations_output (tool tt_get_certificate_observations). Unknown or repeated query parameters are refused with 400. Hidden with 404 while the operator interface or CertOps is disabled.

Request​

Responses​

Show where a certificate was observed

Response Headers
    Cache-Control