Envoy

Envoy Certificates API

TLS certificate inspection endpoints

GitHub OpenAPI

Operations 1

GET /certs Envoy Get TLS certificate information #

Documentation

📖
Documentation
https://www.envoyproxy.io/docs/envoy/latest/operations/admin
📖
Documentation
https://aigateway.envoyproxy.io/docs/
📖
GettingStarted
https://aigateway.envoyproxy.io/docs/getting-started/basic-usage/

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/envoy/refs/heads/main/openapi/envoy-certificates-api-openapi.yml

SDKs

📦
GitHubRepository
https://github.com/envoyproxy/ai-gateway

Other Resources

🔗
Reference
https://aigateway.envoyproxy.io/docs/api/
🔗
ChangeLog
https://aigateway.envoyproxy.io/release-notes/

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/envoy-certificates-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

envoy-certificates-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Envoy Admin Certificates API
  description: The Envoy Admin API provides local administrative access to a running Envoy proxy instance. It exposes endpoints for inspecting configuration, checking health, viewing statistics, managing log levels, and controlling the runtime state of the proxy. The Admin API is typically bound to a local interface (default port 9901) and is not intended for external exposure in production environments.
  version: 1.31.0
  contact:
    name: Envoy Proxy Community
    url: https://www.envoyproxy.io/community
  termsOfService: https://www.envoyproxy.io/
servers:
- url: http://localhost:9901
  description: Default Envoy Admin Interface
tags:
- name: Certificates
  description: TLS certificate inspection endpoints
paths:
  /certs:
    get:
      operationId: getCertificates
      summary: Envoy Get TLS certificate information
      description: Returns information about all TLS certificates currently loaded by Envoy including certificate paths, serial numbers, subject alternative names, validity dates, and days until expiration.
      tags:
      - Certificates
      responses:
        '200':
          description: TLS certificate information retrieved
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CertificatesResponse'
components:
  schemas:
    CertificateDetails:
      type: object
      description: Details of a single TLS certificate
      properties:
        path:
          type: string
          description: Filesystem path to the certificate file
        serial_number:
          type: string
          description: Certificate serial number in hex
        subject_alt_names:
          type: array
          description: Subject alternative names in the certificate
          items:
            type: object
            properties:
              dns:
                type: string
                description: DNS SAN entry
              uri:
                type: string
                description: URI SAN entry
              ip_address:
                type: string
                description: IP address SAN entry
        days_until_expiration:
          type: string
          description: Number of days until the certificate expires
        valid_from:
          type: string
          description: Certificate validity start date in ISO 8601 format
        expiration_time:
          type: string
          description: Certificate expiration date in ISO 8601 format
    CertificatesResponse:
      type: object
      description: Information about all TLS certificates loaded by Envoy
      properties:
        certificates:
          type: array
          description: List of certificate chain entries
          items:
            type: object
            properties:
              ca_cert:
                type: array
                description: CA certificate details
                items:
                  $ref: '#/components/schemas/CertificateDetails'
              cert_chain:
                type: array
                description: Certificate chain details
                items:
                  $ref: '#/components/schemas/CertificateDetails'
externalDocs:
  description: Envoy Admin Interface Documentation
  url: https://www.envoyproxy.io/docs/envoy/latest/operations/admin