{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/anthropic/main/json-schema/anthropic-beta-list-tunnel-certificates-response-schema.json",
  "title": "BetaListTunnelCertificatesResponse",
  "description": "The tunnel's certificates.",
  "x-generated": "2026-09-23",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/anthropic-tunnels-api-openapi.yml#/components/schemas/BetaListTunnelCertificatesResponse",
  "type": "object",
  "additionalProperties": false,
  "required": [
    "data",
    "next_page"
  ],
  "properties": {
    "data": {
      "description": "List of certificates, ordered by created_at descending.",
      "type": "array",
      "items": {
        "$ref": "#/$defs/BetaTunnelCertificate"
      }
    },
    "next_page": {
      "description": "Pagination cursor for the next page, or null if no more results.",
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ]
    }
  },
  "$defs": {
    "BetaTimestamp": {
      "description": "A timestamp in RFC 3339 format",
      "type": "string",
      "format": "date-time"
    },
    "BetaTunnelCertificate": {
      "description": "A CA certificate attached to a tunnel.",
      "type": "object",
      "additionalProperties": false,
      "required": [
        "type",
        "id",
        "tunnel_id",
        "fingerprint",
        "expires_at",
        "created_at",
        "archived_at"
      ],
      "properties": {
        "type": {
          "type": "string",
          "const": "tunnel_certificate"
        },
        "id": {
          "description": "Unique identifier for the certificate, prefixed with `tcrt_`.",
          "type": "string"
        },
        "tunnel_id": {
          "description": "ID of the tunnel the certificate is registered against.",
          "type": "string"
        },
        "fingerprint": {
          "description": "Lowercase hex SHA-256 fingerprint of the certificate's DER encoding.",
          "type": "string"
        },
        "expires_at": {
          "description": "RFC 3339 datetime string indicating when the certificate expires, or `null` if it does not expire.",
          "anyOf": [
            {
              "$ref": "#/$defs/BetaTimestamp"
            },
            {
              "type": "null"
            }
          ]
        },
        "created_at": {
          "description": "RFC 3339 datetime string indicating when the certificate was registered.",
          "allOf": [
            {
              "$ref": "#/$defs/BetaTimestamp"
            }
          ]
        },
        "archived_at": {
          "description": "RFC 3339 datetime string indicating when the certificate was archived. Null if it is still in the trusted set.",
          "anyOf": [
            {
              "$ref": "#/$defs/BetaTimestamp"
            },
            {
              "type": "null"
            }
          ]
        }
      }
    }
  }
}