Confluent

Confluent Certificate Authorities (iam/v2) API

[![General Availability](https://img.shields.io/badge/Lifecycle%20Stage-General%20Availability-%2345c6e8)](#section/Versioning/API-Lifecycle-Policy) `CertificateAuthority` objects represent signing certificate authorities in Confluent Cloud. The API allows you to list, create, read, update, and delete your Certificate Authority. Related guide: [Manage certificate authorities used for client authentication with X.509 certificates.](https://docs.confluent.io/cloud/current/access-management/authenticate/mtls/overview.html). ## The Certificate Authorities Model ## Quotas and Limits This resource is subject to the [following quotas](https://docs.confluent.io/cloud/current/quotas/overview.html): | Quota | Description | | --- | --- | | `certificate_authorities_per_org` | Number of certificate authorities per organization |

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 5

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /iam/v2/certificate-authorities List certificate authorities · List of Certificate Authorities #
Ask an LLM
“Which certificate authorities are registered for mTLS in my organization?”
“How do I page through all my certificate authorities?”
Tell an agent
List all certificate authorities.
Show the next page of certificate authorities after {page_token}.
POST /iam/v2/certificate-authorities Register a certificate authority · Create a Certificate Authority #
Ask an LLM
“How do I upload a CA certificate chain so clients can authenticate with mTLS?”
“Can I require CRL checks on client certificates when adding a certificate authority?”
Tell an agent
Create a certificate authority named {display_name} from chain {certificate_chain}.
Add certificate authority {display_name} with its CRL fetched from {crl_url}.
GET /iam/v2/certificate-authorities/{id} Get a certificate authority · Read a Certificate Authority #
Ask an LLM
“What certificate chain and CRL settings does one of my CAs have?”
“Can I read a single certificate authority by its ID?”
Tell an agent
Get certificate authority {id}.
Show the settings of CA {id}.
PUT /iam/v2/certificate-authorities/{id} Update a certificate authority · Update a Certificate Authority #
Ask an LLM
“How do I rotate the certificate chain on an existing certificate authority?”
“Can I change the CRL URL for a CA I already registered?”
Tell an agent
Replace the certificate chain on CA {id} with {certificate_chain} from file {certificate_chain_filename}.
Point certificate authority {id} at CRL URL {crl_url}.
DELETE /iam/v2/certificate-authorities/{id} Delete a certificate authority · Delete a Certificate Authority #
Ask an LLM
“What removes a certificate authority from my organization?”
“Can I delete a CA I no longer trust for mTLS?”
Tell an agent destructive · confirm first
Delete certificate authority {id}.
Remove CA {id} from the organization.

Documentation

📖
APIReference
https://docs.confluent.io/cloud/current/api.html
📖
APIReference
https://api.telemetry.confluent.cloud/docs

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/confluent/refs/heads/main/openapi/confluent-certificate-authorities-iam-v2-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/confluent/refs/heads/main/json-schema/confluent-iam-v2-update-cert-request-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/confluent/refs/heads/main/json-schema/confluent-iam-v2-create-cert-request-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/confluent/refs/heads/main/json-schema/confluent-iam-v2-certificate-authority-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/confluent/refs/heads/main/json-schema/confluent-iam-v2-certificate-authority-list-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/confluent:confluent-certificate-authorities-iam-v2-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

confluent-certificate-authorities-iam-v2-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Confluent Certificate Authorities (iam/v2) API
  version: ''
  x-api-id: 46234552-5833-42eb-ba0f-883ad3f70d2b
  x-audience: external-public
  x-logo:
    url: https://assets.confluent.io/m/1661ef5e4ff82d3d/
  description: 'Operations tagged Certificate Authorities (iam/v2) across 2 of this provider''s published API definitions: confluent-cloud-openapi.yaml, confluent-cloud-full.yaml. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.confluent.cloud
  description: Confluent Cloud API
tags:


# --- truncated at 32 KB (77 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/confluent/refs/heads/main/openapi/confluent-certificate-authorities-iam-v2-api-openapi.yml