openapi: 3.2.0 info: title: Mist Orgs SCEP API description: '> Version: **2607.1.1** > > Date: **August 17, 2026** NOTE: Some important API changes will be introduced.' contact: name: Thomas Munzer email: tmunzer@juniper.net version: 2607.1.1 servers: - url: https://api.mist.com variables: {} - url: https://api.gc1.mist.com variables: {} - url: https://api.ac2.mist.com variables: {} - url: https://api.gc2.mist.com variables: {} - url: https://api.gc4.mist.com variables: {} - url: https://api.eu.mist.com variables: {} - url: https://api.gc3.mist.com variables: {} - url: https://api.ac6.mist.com variables: {} - url: https://api.gc6.mist.com variables: {} - url: https://api.ac5.mist.com variables: {} - url: https://api.gc5.mist.com variables: {} - url: https://api.gc7.mist.com variables: {} security: - apiToken: [] - csrfToken: [] tags: - name: Orgs SCEP paths: /api/v1/orgs/{org_id}/setting/mist_scep: parameters: [] delete: tags: - Orgs SCEP summary: disableOrgMistScep description: Disable Mist SCEP for the organization and return the updated read-only SCEP settings. operationId: disableOrgMistScep parameters: - name: org_id in: path description: '' required: true schema: type: string contentEncoding: uuid examples: - 000000ab-00ab-00ab-00ab-0000000000ab responses: '200': description: OK headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/org_setting_scep_response' - description: Read-only Mist SCEP settings returned for the organization examples: - cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep contentMediaType: application/json examples: Example: value: cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/org_setting_scep_response' - description: Read-only Mist SCEP settings returned for the organization examples: - cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep contentMediaType: application/vnd.api+json examples: Example: value: cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep '400': description: Bad Syntax headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http400' - description: Standard HTTP 400 bad request error response examples: - detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' contentMediaType: application/json examples: Example: value: detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http400' - description: Standard HTTP 400 bad request error response examples: - detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' contentMediaType: application/vnd.api+json examples: Example: value: detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' '401': description: Unauthorized headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http401' - description: Standard HTTP 401 authentication error response examples: - detail: Authentication credentials were not provided. contentMediaType: application/json examples: Example: value: detail: Authentication credentials were not provided. application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http401' - description: Standard HTTP 401 authentication error response examples: - detail: Authentication credentials were not provided. contentMediaType: application/vnd.api+json examples: Example: value: detail: Authentication credentials were not provided. '403': description: Permission Denied headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http403' - description: Standard HTTP 403 permission error response examples: - detail: You do not have permission to perform this action. contentMediaType: application/json examples: Example: value: detail: You do not have permission to perform this action. application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http403' - description: Standard HTTP 403 permission error response examples: - detail: You do not have permission to perform this action. contentMediaType: application/vnd.api+json examples: Example: value: detail: You do not have permission to perform this action. '404': description: Not found. The API endpoint doesn’t exist or resource doesn’ t exist headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http404' - description: Standard HTTP 404 not found error response contentMediaType: application/json application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http404' - description: Standard HTTP 404 not found error response contentMediaType: application/vnd.api+json '429': description: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http429' - description: Standard HTTP 429 rate limit error response examples: - detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold contentMediaType: application/json examples: Example: value: detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http429' - description: Standard HTTP 429 rate limit error response examples: - detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold contentMediaType: application/vnd.api+json examples: Example: value: detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold deprecated: false get: tags: - Orgs SCEP summary: getOrgMistScep description: Return Mist SCEP settings for the organization, including enabled and suspended status, configured certificate providers, and generated enrollment or webhook URLs. operationId: getOrgMistScep parameters: - name: org_id in: path description: '' required: true schema: type: string contentEncoding: uuid examples: - 000000ab-00ab-00ab-00ab-0000000000ab responses: '200': description: OK headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/org_setting_scep_response' - description: Read-only Mist SCEP settings returned for the organization examples: - cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep contentMediaType: application/json examples: Example: value: cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/org_setting_scep_response' - description: Read-only Mist SCEP settings returned for the organization examples: - cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep contentMediaType: application/vnd.api+json examples: Example: value: cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep '400': description: Bad Syntax headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http400' - description: Standard HTTP 400 bad request error response examples: - detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' contentMediaType: application/json examples: Example: value: detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http400' - description: Standard HTTP 400 bad request error response examples: - detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' contentMediaType: application/vnd.api+json examples: Example: value: detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' '401': description: Unauthorized headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http401' - description: Standard HTTP 401 authentication error response examples: - detail: Authentication credentials were not provided. contentMediaType: application/json examples: Example: value: detail: Authentication credentials were not provided. application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http401' - description: Standard HTTP 401 authentication error response examples: - detail: Authentication credentials were not provided. contentMediaType: application/vnd.api+json examples: Example: value: detail: Authentication credentials were not provided. '403': description: Permission Denied headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http403' - description: Standard HTTP 403 permission error response examples: - detail: You do not have permission to perform this action. contentMediaType: application/json examples: Example: value: detail: You do not have permission to perform this action. application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http403' - description: Standard HTTP 403 permission error response examples: - detail: You do not have permission to perform this action. contentMediaType: application/vnd.api+json examples: Example: value: detail: You do not have permission to perform this action. '404': description: Not found. The API endpoint doesn’t exist or resource doesn’ t exist headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http404' - description: Standard HTTP 404 not found error response contentMediaType: application/json application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http404' - description: Standard HTTP 404 not found error response contentMediaType: application/vnd.api+json '429': description: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http429' - description: Standard HTTP 429 rate limit error response examples: - detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold contentMediaType: application/json examples: Example: value: detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http429' - description: Standard HTTP 429 rate limit error response examples: - detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold contentMediaType: application/vnd.api+json examples: Example: value: detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold deprecated: false put: tags: - Orgs SCEP summary: updateOrgMistScep description: Update Mist SCEP settings for the organization, including enabled state, suspension state, and certificate providers. operationId: updateOrgMistScep parameters: - name: org_id in: path description: '' required: true schema: type: string contentEncoding: uuid examples: - 000000ab-00ab-00ab-00ab-0000000000ab requestBody: description: '' content: application/json: schema: allOf: - $ref: '#/components/schemas/org_setting_scep' - examples: - enabled: true contentMediaType: application/json examples: Example: value: enabled: true required: false responses: '200': description: OK headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/org_setting_scep_response' - description: Read-only Mist SCEP settings returned for the organization examples: - cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep contentMediaType: application/json examples: Example: value: cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/org_setting_scep_response' - description: Read-only Mist SCEP settings returned for the organization examples: - cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep contentMediaType: application/vnd.api+json examples: Example: value: cert_providers: - jamf - intune - byod enabled: false intune_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep '400': description: Bad Syntax headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http400' - description: Standard HTTP 400 bad request error response examples: - detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' contentMediaType: application/json examples: Example: value: detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http400' - description: Standard HTTP 400 bad request error response examples: - detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' contentMediaType: application/vnd.api+json examples: Example: value: detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' '401': description: Unauthorized headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http401' - description: Standard HTTP 401 authentication error response examples: - detail: Authentication credentials were not provided. contentMediaType: application/json examples: Example: value: detail: Authentication credentials were not provided. application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http401' - description: Standard HTTP 401 authentication error response examples: - detail: Authentication credentials were not provided. contentMediaType: application/vnd.api+json examples: Example: value: detail: Authentication credentials were not provided. '403': description: Permission Denied headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http403' - description: Standard HTTP 403 permission error response examples: - detail: You do not have permission to perform this action. contentMediaType: application/json examples: Example: value: detail: You do not have permission to perform this action. application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http403' - description: Standard HTTP 403 permission error response examples: - detail: You do not have permission to perform this action. contentMediaType: application/vnd.api+json examples: Example: value: detail: You do not have permission to perform this action. '404': description: Not found. The API endpoint doesn’t exist or resource doesn’ t exist headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http404' - description: Standard HTTP 404 not found error response contentMediaType: application/json application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http404' - description: Standard HTTP 404 not found error response contentMediaType: application/vnd.api+json '429': description: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http429' - description: Standard HTTP 429 rate limit error response examples: - detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold contentMediaType: application/json examples: Example: value: detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http429' - description: Standard HTTP 429 rate limit error response examples: - detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold contentMediaType: application/vnd.api+json examples: Example: value: detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold deprecated: false /api/v1/orgs/{org_id}/setting/mist_scep/client_certs: parameters: [] get: tags: - Orgs SCEP summary: listOrgIssuedClientCertificates description: List Mist SCEP client certificates issued for the organization. Results can be filtered by common name, certificate provider, serial number, device ID, or time range. operationId: listOrgIssuedClientCertificates parameters: - name: org_id in: path description: '' required: true schema: type: string contentEncoding: uuid examples: - 000000ab-00ab-00ab-00ab-0000000000ab - name: common_name in: query description: Filter by certificate common name (e.g. user UPN or device identifier) style: form explode: true schema: type: string - name: cert_provider in: query description: Filter by MDM or certificate provider that issued the certificate. Accepts multiple comma-separated values. style: form explode: true schema: type: string - name: serial_number in: query description: Filter by certificate serial number. Accepts multiple comma-separated values. style: form explode: true schema: type: string - name: device_id in: query description: Filter by device identifier associated with the certificate. Accepts multiple comma-separated values. style: form explode: true schema: type: string - name: expire_time in: query description: Filter by certificate expiry time, in epoch seconds style: form explode: true schema: type: integer contentEncoding: int32 - name: created_time in: query description: Filter by certificate issuance time, in epoch seconds style: form explode: true schema: type: integer contentEncoding: int32 - name: limit in: query description: Maximum number of results to return per page style: form explode: true schema: minimum: 0 type: integer contentEncoding: int32 default: 100 - name: page in: query description: Select the page number to return when using page-based pagination; starts at `1` style: form explode: true schema: minimum: 1 type: integer contentEncoding: int32 default: 1 responses: '200': description: OK headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/issued_client_certificates_results' - description: Issued client certificate search results wrapper examples: - limit: 100 page: 1 results: - cert_provider: jamf common_name: john@corp.com created_time: 1431382121 device_id: b069b358-4c97-5319-1f8c-7c5ca64d6ab1 expire_time: 1718921115 serial_number: 13 00 13 03 23 EE D5 84 01 contentMediaType: application/json examples: Example: value: limit: 100 page: 1 results: - cert_provider: jamf common_name: john@corp.com created_time: 1431382121 device_id: b069b358-4c97-5319-1f8c-7c5ca64d6ab1 expire_time: 1718921115 serial_number: 13 00 13 03 23 EE D5 84 01 application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/issued_client_certificates_results' - description: Issued client certificate search results wrapper examples: - limit: 100 page: 1 results: - cert_provider: jamf common_name: john@corp.com created_time: 1431382121 device_id: b069b358-4c97-5319-1f8c-7c5ca64d6ab1 expire_time: 1718921115 serial_number: 13 00 13 03 23 EE D5 84 01 contentMediaType: application/vnd.api+json examples: Example: value: limit: 100 page: 1 results: - cert_provider: jamf common_name: john@corp.com created_time: 1431382121 device_id: b069b358-4c97-5319-1f8c-7c5ca64d6ab1 expire_time: 1718921115 serial_number: 13 00 13 03 23 EE D5 84 01 '400': description: Bad Syntax headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http400' - description: Standard HTTP 400 bad request error response examples: - detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' contentMediaType: application/json examples: Example: value: detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http400' - description: Standard HTTP 400 bad request error response examples: - detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' contentMediaType: application/vnd.api+json examples: Example: value: detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' '401': description: Unauthorized headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http401' - description: Standard HTTP 401 authentication error response examples: - detail: Authentication credentials were not provided. contentMediaType: application/json examples: Example: value: detail: Authentication credentials were not provided. application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http401' - description: Standard HTTP 401 authentication error response examples: - detail: Authentication credentials were not provided. contentMediaType: application/vnd.api+json examples: Example: value: detail: Authentication credentials were not provided. '403': description: Permission Denied headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http403' - description: Standard HTTP 403 permission error response examples: - detail: You do not have permission to perform this action. contentMediaType: application/json examples: Example: value: detail: You do not have permission to perform this action. application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http403' - description: Standard HTTP 403 permission error response examples: - detail: You do not have permission to perform this action. contentMediaType: application/vnd.api+json examples: Example: value: detail: You do not have permission to perform this action. '404': description: Not found. The API endpoint doesn’t exist or resource doesn’ t exist headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http404' - description: Standard HTTP 404 not found error response contentMediaType: application/json application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http404' - description: Standard HTTP 404 not found error response contentMediaType: application/vnd.api+json '429': description: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http429' - description: Standard HTTP 429 rate limit error response examples: - detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold contentMediaType: application/json examples: Example: value: detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http429' - description: Standard HTTP 429 rate limit error response examples: - detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold contentMediaType: application/vnd.api+json examples: Example: value: detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold deprecated: false /api/v1/orgs/{org_id}/setting/mist_scep/client_certs/revoke: parameters: [] post: tags: - Orgs SCEP summary: revokeOrgIssuedClientCertificates description: Revoke issued Mist SCEP client certificates by certificate serial number. operationId: revokeOrgIssuedClientCertificates parameters: - name: org_id in: path description: '' required: true schema: type: string contentEncoding: uuid examples: - 000000ab-00ab-00ab-00ab-0000000000ab requestBody: description: '' content: application/json: schema: allOf: - $ref: '#/components/schemas/client_cert_serial_numbers' - examples: - serial_numbers: - 13 00 13 03 23 EE D5 84 01 contentMediaType: application/json examples: Example: value: serial_numbers: - 13 00 13 03 23 EE D5 84 01 required: false responses: '200': description: OK headers: {} content: {} '400': description: Bad Syntax headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http400' - description: Standard HTTP 400 bad request error response examples: - detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' contentMediaType: application/json examples: Example: value: detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http400' - description: Standard HTTP 400 bad request error response examples: - detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' contentMediaType: application/vnd.api+json examples: Example: value: detail: 'JSON parse error - Expecting value: line 5 column 8 (char 56)' '401': description: Unauthorized headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http401' - description: Standard HTTP 401 authentication error response examples: - detail: Authentication credentials were not provided. contentMediaType: application/json examples: Example: value: detail: Authentication credentials were not provided. application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http401' - description: Standard HTTP 401 authentication error response examples: - detail: Authentication credentials were not provided. contentMediaType: application/vnd.api+json examples: Example: value: detail: Authentication credentials were not provided. '403': description: Permission Denied headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http403' - description: Standard HTTP 403 permission error response examples: - detail: You do not have permission to perform this action. contentMediaType: application/json examples: Example: value: detail: You do not have permission to perform this action. application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http403' - description: Standard HTTP 403 permission error response examples: - detail: You do not have permission to perform this action. contentMediaType: application/vnd.api+json examples: Example: value: detail: You do not have permission to perform this action. '404': description: Not found. The API endpoint doesn’t exist or resource doesn’ t exist headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http404' - description: Standard HTTP 404 not found error response contentMediaType: application/json application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http404' - description: Standard HTTP 404 not found error response contentMediaType: application/vnd.api+json '429': description: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold headers: {} content: application/json: schema: allOf: - $ref: '#/components/schemas/response_http429' - description: Standard HTTP 429 rate limit error response examples: - detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold contentMediaType: application/json examples: Example: value: detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold application/vnd.api+json: schema: allOf: - $ref: '#/components/schemas/response_http429' - description: Standard HTTP 429 rate limit error response examples: - detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold contentMediaType: application/vnd.api+json examples: Example: value: detail: Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold deprecated: false components: schemas: response_http403: title: response_http403 type: object properties: detail: type: string description: Human-readable explanation of the permission error examples: - You do not have permission to perform this action. description: Standard HTTP 403 permission error response issued_client_certificate: title: issued_client_certificate type: object properties: cert_provider: type: string description: Certificate provider that issued this client certificate examples: - byod common_name: type: string description: Subject common name encoded in the issued client certificate examples: - john@corp.com created_time: type: integer description: Certificate issuance time, in epoch seconds contentEncoding: int32 device_id: type: string description: Device associated with the issued client certificate contentEncoding: uuid readOnly: true examples: - 00000000-0000-0000-1000-d8695a0f9e61 expire_time: type: integer description: Certificate expiry time, in epoch seconds contentEncoding: int32 serial_number: type: string description: Certificate serial number used for lookup or revocation examples: - 91984382552102771A2B3C4E5F224719956718003374658 description: Issued Mist SCEP client certificate metadata org_setting_scep_cert_provider: title: org_setting_scep_cert_provider enum: - intune - jamf - byod type: string description: 'enum: `intune`, `jamf`, `byod`' client_cert_serial_numbers: title: client_cert_serial_numbers type: object properties: serial_numbers: uniqueItems: true type: array items: type: string description: Certificate serial numbers to revoke description: Client certificate serial numbers targeted by a certificate operation examples: - serial_numbers: - 13 00 13 03 23 EE D5 84 01 response_http400: title: response_http400 type: object properties: detail: type: string description: Human-readable explanation of the bad request error examples: - 'JSON parse error - Expecting value: line 5 column 8 (char 56)' description: Standard HTTP 400 bad request error response issued_client_certificates_results: title: issued_client_certificates_results type: object properties: limit: type: integer description: Maximum number of results requested contentEncoding: int32 page: type: integer description: Current page number contentEncoding: int32 results: type: array items: $ref: '#/components/schemas/issued_client_certificate' description: List of issued client certificates returned by the query description: Issued client certificate search results wrapper response_http404: title: response_http404 type: object properties: id: type: string description: Missing resource identifier, when the API includes one description: Standard HTTP 404 not found error response response_http401: title: response_http401 type: object properties: detail: type: string description: Human-readable explanation of the authentication error examples: - Authentication credentials were not provided. description: Standard HTTP 401 authentication error response response_http429: title: response_http429 type: object properties: detail: type: string description: Human-readable explanation of the rate limit error examples: - Too Many Request. The API Token used for the request reached the 5000 API Calls per hour threshold description: Standard HTTP 429 rate limit error response org_setting_scep_response: title: org_setting_scep_response type: object properties: cert_providers: type: array items: $ref: '#/components/schemas/org_setting_scep_cert_provider' description: Certificate providers configured for Mist SCEP enabled: type: boolean description: Whether Mist SCEP is enabled for this organization readOnly: true intune_scep_url: type: string description: Intune SCEP enrollment URL for this organization readOnly: true examples: - https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_access_token: type: string description: Access token used by Jamf to call Mist SCEP readOnly: true examples: - 1Z4QqEnCt05Jjt3TV5LgPJ4V_WL_RWnJ7dqVMLYHj81= jamf_scep_url: type: string description: Jamf SCEP enrollment URL for this organization readOnly: true examples: - https://scep.mistsys.com/api/v1/incoming/intune/:org_id/scep jamf_webhook_url: type: string description: Jamf webhook URL for SCEP status callbacks readOnly: true examples: - https://scep.mistsys.com/api/v1/webhook/jamf/:org_id/scep suspended: type: boolean description: Whether SCEP is suspended for this org default: false description: Read-only Mist SCEP settings returned for the organization org_setting_scep: title: org_setting_scep type: object properties: cert_providers: type: array items: $ref: '#/components/schemas/org_setting_scep_cert_provider' description: Certificate providers enabled for Mist SCEP enable: type: boolean description: Whether SCEP is enabled for this org suspended: type: boolean description: Whether SCEP is suspended for this org default: false description: Mist SCEP settings for certificate enrollment securitySchemes: apiToken: type: apiKey description: "Preferred authentication method for automation and integrations. Send the API token in the HTTP `Authorization` header.\n\n**Format**:\n `Authorization: Token {apitoken}`\n\n**Notes**:\n* An API token generated for a specific admin has the same privileges as that admin\n* An API token is automatically removed if it is not used for more than 90 days\n* SSO admins cannot generate admin API tokens. Use organization API tokens when scoped Org/Site privileges are needed." name: Authorization in: header csrfToken: type: apiKey description: 'Session-based authentication for browser or login/password flows. After a successful [Login]($e/Admins%20Login/login) request, Mist returns a `csrftoken` cookie. Send that value in the `X-CSRFToken` header on later API requests that use the login session. **Format**: ``` X-CSRFToken: vwvBuq9qkqaKh7lu8tNc0gkvBfEaLAmx ``` For automation, API Token authentication is preferred.' name: X-CSRFToken in: header