{ "$schema": "https://json-schema.org/draft/2020-12/schema", "$id": "https://raw.githubusercontent.com/api-evangelist/anthropic/main/json-schema/anthropic-beta-tunnel-certificate-schema.json", "title": "BetaTunnelCertificate", "description": "A CA certificate attached to a tunnel.", "x-generated": "2026-09-23", "x-method": "derived", "x-generator": "derive-json-schema.py", "x-source": "openapi/anthropic-tunnels-api-openapi.yml#/components/schemas/BetaTunnelCertificate", "type": "object", "additionalProperties": false, "required": [ "type", "id", "tunnel_id", "fingerprint", "expires_at", "created_at", "archived_at" ], "properties": { "type": { "type": "string", "const": "tunnel_certificate" }, "id": { "description": "Unique identifier for the certificate, prefixed with `tcrt_`.", "type": "string" }, "tunnel_id": { "description": "ID of the tunnel the certificate is registered against.", "type": "string" }, "fingerprint": { "description": "Lowercase hex SHA-256 fingerprint of the certificate's DER encoding.", "type": "string" }, "expires_at": { "description": "RFC 3339 datetime string indicating when the certificate expires, or `null` if it does not expire.", "anyOf": [ { "$ref": "#/$defs/BetaTimestamp" }, { "type": "null" } ] }, "created_at": { "description": "RFC 3339 datetime string indicating when the certificate was registered.", "allOf": [ { "$ref": "#/$defs/BetaTimestamp" } ] }, "archived_at": { "description": "RFC 3339 datetime string indicating when the certificate was archived. Null if it is still in the trusted set.", "anyOf": [ { "$ref": "#/$defs/BetaTimestamp" }, { "type": "null" } ] } }, "$defs": { "BetaTimestamp": { "description": "A timestamp in RFC 3339 format", "type": "string", "format": "date-time" } } }