Skip to main content

List certificates

GET 
/api/v1/operator/certificates

Lists certificate identities in the connection's workspace by status, expiry window or text. Search matches only names, issuer, subject alternative names and fingerprint. Key references, deployed paths and source references are never returned, and cannot be inferred by searching for them. Provisional rows (issuance in flight) have a null fingerprint. Authenticated only with an operator connection credential holding the mcp:certs:read scope; the workspace comes from the connection. Response shape: packages/contracts/mcp/mcp-read-tools.schema.json definition tt_list_certificates_output (tool tt_list_certificates). Unknown or repeated query parameters are refused with 400. Hidden with 404 while the operator interface or CertOps is disabled.

Request​

Responses​

List certificates

Response Headers
    Cache-Control