HERE

HERE Manage mTLS Identity Providers API

APIs to manage mTLS Identity Provider Certificate Authorities in a Realm.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 9

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /realms/{realm}/mtlsIdentityProviders Create an mTLS identity provider · Create an mTLS Identity Provider #
Ask an LLM
“How do I let devices authenticate with client certificates from my own CA?”
“What do I need to register a certificate authority as an mTLS identity provider?”
Tell an agent
Create an mTLS identity provider named {name} in realm {realm} with CA chain {certificateChainPemContent}.
Trust this PEM certificate chain for mTLS in realm {realm} as {name}: {certificateChainPemContent}.
GET /realms/{realm}/mtlsIdentityProviders List mTLS identity providers in a realm · Get the list of mTLS Identity Providers #
Ask an LLM
“Which mTLS identity providers are configured for my HERE realm?”
“Are any certificate authorities trusted for mutual TLS in our organization?”
Tell an agent
List the mTLS identity providers in realm {realm}.
Show all trusted certificate authorities configured for mTLS in realm {realm}.
GET /realms/{realm}/mtlsIdentityProviders/{mtlsIdentityProvider} Get an mTLS identity provider · Get an mTLS Identity Provider #
Ask an LLM
“What certificate authority is behind a specific mTLS identity provider?”
“Can I view the configuration of one mTLS identity provider?”
Tell an agent
Get mTLS identity provider {mtlsIdentityProvider} in realm {realm}.
Show details of mTLS provider {mtlsIdentityProvider} for realm {realm}.
PATCH /realms/{realm}/mtlsIdentityProviders/{mtlsIdentityProvider} Update an mTLS identity provider's CA chain · Update mTLS Identity Provider #
Ask an LLM
“How do I rotate the certificate chain on an existing mTLS identity provider?”
“Can I rename an mTLS identity provider?”
Tell an agent
Replace the CA chain of mTLS provider {mtlsIdentityProvider} in realm {realm} with {certificateChainPemContent} and name it {name}.
Rename existing mTLS provider {mtlsIdentityProvider} in realm {realm} to {name}, keeping chain {certificateChainPemContent}.
DELETE /realms/{realm}/mtlsIdentityProviders/{mtlsIdentityProvider} Remove an mTLS identity provider · Remove mTLS Identity Provider #
Ask an LLM
“How do I stop trusting a certificate authority for mTLS in my realm?”
“Can an mTLS identity provider be deleted?”
Tell an agent destructive · confirm first
Delete mTLS identity provider {mtlsIdentityProvider} from realm {realm}.
Remove the trusted CA {mtlsIdentityProvider} from realm {realm}.
GET /realms/{realm}/mtlsIdentityProviders/{mtlsIdentityProvider}/authenticators List authenticators for an mTLS identity provider · List the mTLS Authenticators configured for the specified mTLS Identity Provider #
Ask an LLM
“Which mTLS authenticator checks certificates for a given identity provider?”
“How many authenticators does an mTLS identity provider have?”
Tell an agent
List mTLS authenticators for identity provider {mtlsIdentityProvider} in realm {realm}.
Show the authenticator configured on mTLS provider {mtlsIdentityProvider} in realm {realm}.
GET /realms/{realm}/mtlsIdentityProviders/{mtlsIdentityProvider}/authenticators/{mtlsAuthenticator} Get an mTLS authenticator · Get an mTLS Authenticator #
Ask an LLM
“Is a particular mTLS authenticator enabled?”
“Can I inspect one authenticator by its ID under an mTLS identity provider?”
Tell an agent
Get mTLS authenticator {mtlsAuthenticator} of provider {mtlsIdentityProvider} in realm {realm}.
Check whether authenticator {mtlsAuthenticator} on {mtlsIdentityProvider} in realm {realm} is enabled.
PATCH /realms/{realm}/mtlsIdentityProviders/{mtlsIdentityProvider}/authenticators/{mtlsAuthenticator} Enable or disable an mTLS authenticator · Update an mTLS Authenticator #
Ask an LLM
“How do I temporarily turn off certificate authentication for an mTLS provider?”
“Can I re-enable a disabled mTLS authenticator?”
Tell an agent
Set authenticator {mtlsAuthenticator} on {mtlsIdentityProvider} in realm {realm} to enabled={enabled}.
Disable mTLS authenticator {mtlsAuthenticator} for provider {mtlsIdentityProvider} in realm {realm}.
GET /apps/{app}/mtlsAuthenticators List mTLS authenticators configured for an app · List the mTLS Authenticators configured for an App #
Ask an LLM
“Which mTLS authenticators is my app set up to use?”
“Can an app authenticate with client certificates, and through which authenticators?”
Tell an agent
List the mTLS authenticators configured for app {app}.
Show which certificate authenticators app {app} uses.

Documentation

📖
Documentation
https://docs.here.com/identity-and-access-management/docs
📖
APIReference
https://docs.here.com/identity-and-access-management/reference
📖
Documentation
https://docs.here.com/data-api/docs
📖
APIReference
https://docs.here.com/data-api/reference
📖
Documentation
https://docs.here.com/usage/docs
📖
APIReference
https://docs.here.com/usage/reference
📖
Documentation
https://docs.here.com/destination-weather/docs
📖
APIReference
https://docs.here.com/destination-weather/reference
📖
Documentation
https://docs.here.com/ev-products/docs
📖
APIReference
https://docs.here.com/ev-products/reference
📖
Documentation
https://docs.here.com/fuel-prices/docs
📖
APIReference
https://docs.here.com/fuel-prices/reference
📖
Documentation
https://docs.here.com/geocoding-and-search/docs
📖
APIReference
https://docs.here.com/geocoding-and-search/reference
📖
Documentation
https://docs.here.com/routing/docs
📖
APIReference
https://docs.here.com/routing/reference
📖
Documentation
https://docs.here.com/positioning/docs
📖
APIReference
https://docs.here.com/positioning/reference
📖
Documentation
https://docs.here.com/indoor-map/docs
📖
APIReference
https://docs.here.com/indoor-map/reference
📖
Documentation
https://docs.here.com/transit/docs
📖
APIReference
https://docs.here.com/transit/reference
📖
Documentation
https://docs.here.com/map-attributes/docs
📖
APIReference
https://docs.here.com/map-attributes/reference
📖
Documentation
https://docs.here.com/map-rendering/docs
📖
APIReference
https://docs.here.com/map-rendering/reference
📖
Documentation
https://docs.here.com/workspace/docs
📖
APIReference
https://docs.here.com/workspace/reference
📖
Documentation
https://docs.here.com/tour-planning/docs
📖
APIReference
https://docs.here.com/tour-planning/reference
📖
Documentation
https://docs.here.com/tracking/docs
📖
APIReference
https://docs.here.com/tracking/reference
📖
Documentation
https://docs.here.com/traffic-api/docs
📖
APIReference
https://docs.here.com/traffic-api/reference
📖
Documentation
https://docs.here.com/wego-pro/docs
📖
APIReference
https://docs.here.com/wego-pro/reference

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/here/refs/heads/main/openapi/here-manage-mtls-identity-providers-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/here:here-manage-mtls-identity-providers-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

here-manage-mtls-identity-providers-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Authentication API v1.1 Manage mTLS Identity Providers API
  version: 1.1.x
  description: 'This specification describes the Authentication v1.1 APIs.

    NOTE: Swagger UI automatically URL encodes parameters when required.

    If/when the APIs are called elsewhere make sure to URL encode the parameters when required.'
servers:
- url: Use API Lookup for a base URL
tags:


# --- truncated at 32 KB (35 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/here/refs/heads/main/openapi/here-manage-mtls-identity-providers-api-openapi.yml