List connector certificates

⚠️
Preview — this feature is being built; the design below is the spec.
GET https://app.syntic.ai/v1/tunnels/{tunnel_id}/certificates

Return the tunnel’s certificates, including expired and revoked ones.

For how this fits into a full workflow, see MCP tunnels.

Headers

HeaderRequiredValue
AuthorizationYesBearer <key>: a private inference key (sk_live_...). See Authentication.
syntic-betaYes, while in previewmcp-tunnels-2026-12-01. Without it the call fails with 400 beta_required. See Versioning.

Path parameters

ParameterTypeDescription
tunnel_idstringThe tunnel id, starting with tnl_.

Query parameters

ParameterTypeDefaultDescription
statusstringFilter by status.
limitinteger201 to 100.
after_idstringNext page: the previous page’s last_id.
before_idstringPrevious page: the previous page’s first_id.

Response

200 OK, Content-Type: application/json

{
  "data": [
    {
      "id": "tcert_01JCE9K1M3P5R7T9V1X3",
      "type": "tunnel_certificate",
      "tunnel_id": "tnl_01JCE4G6J8L0N2Q4S6U8",
      "subject": "CN=erp-onprem-connector-1",
      "serial": "4A:91:0C:7E:22:5B",
      "fingerprint_sha256": "b2:7e:…:91",
      "not_before": "2026-11-05T10:00:00Z",
      "not_after": "2027-02-03T10:00:00Z",
      "status": "active"
    }
  ],
  "has_more": false,
  "first_id": "tcert_01JCE9K1M3P5R7T9V1X3",
  "last_id": "tcert_01JCE9K1M3P5R7T9V1X3"
}
FieldTypeDescription
dataarrayThe objects on this page, newest first.
has_morebooleantrue when another page exists after this one.
first_idstring or nullPass as before_id to go back a page.
last_idstring or nullPass as after_id to get the next page.

Examples

curl -sS "https://app.syntic.ai/v1/tunnels/tnl_01JCE4G6J8L0N2Q4S6U8/certificates" \
  -H "Authorization: Bearer $SYNTIC_API_KEY" \
  -H "syntic-beta: mcp-tunnels-2026-12-01"

Errors

Errors use the error envelope and carry a request_id. Codes specific to this operation:

StatustypecodeWhen
400invalid_request_errorbeta_requiredThe syntic-beta header is missing.
404not_found_errortunnel_not_foundNo tunnel with this id in the key’s workspace.
401authentication_errorinvalid_api_keyThe key is missing, unknown, revoked or expired.
429rate_limit_errorrate_limitedToo many requests; wait for Retry-After. See Rate-limit headers.
Was this page helpful?