SmallStep

SmallStep PKI Architecture API

Manage certificate authorities and provisioners

GitHub OpenAPI

Operations 13

GET /authorities List Authorities #
POST /authorities Create New Authority #
POST /authorities/csr Create New Authority CSR #
DELETE /authorities/{authorityDomainOrID} Delete Authority #
GET /authorities/{authorityDomainOrID} Get Authority #
GET /authorities/{authorityID}/provisioners List Authority Provisioners #
POST /authorities/{authorityID}/provisioners Create Authority Provisioner #
DELETE /authorities/{authorityID}/provisioners/{provisionerNameOrID} Delete Provisioner #
GET /authorities/{authorityID}/provisioners/{provisionerNameOrID} Get Provisioner #
POST /authorities/{authorityID}/provisioners/{provisionerNameOrID}/webhooks Create Provisioner Webhook #
DELETE /authorities/{authorityID}/provisioners/{provisionerNameOrID}/webhooks/{webhookNameOrID} Delete Provisioner Webhook #
GET /authorities/{authorityID}/provisioners/{provisionerNameOrID}/webhooks/{webhookNameOrID} Get Provisioner Webhook #
POST /authorities/{authorityID}/root Post Authority External Root #

Documentation

📖
Documentation
https://smallstep.com/docs/platform/smallstep-api/
📖
APIReference
https://gateway.smallstep.com/v2025-01-01

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/smallstep/refs/heads/main/openapi/smallstep-pki-architecture-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/smallstep-pki-architecture-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

smallstep-pki-architecture-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  contact:
    email: support@smallstep.com
    name: Smallstep Support
    url: https://support.smallstep.com
  description: '# Getting Started

    First you''ll need to get an API token from the Team Settings page of your Smallstep dashboard.


    Then you can try listing certificates for your first API call:

    ```

    set +o history

    echo "Authorization: Bearer [your API token]" > api_headers

    set -o history

    curl -H @api_headers https://gateway.smallstep.com/api/certificates

    ```


    More resources:

    * Terraform Provider

    * Python Client'
  license:
    name: Apache 2.0
    url: https://www.apache.org/licenses/LICENSE-2.0
  summary: Smallstep API
  title: Smallstep PKI Architecture API
  version: '2025-01-01'
servers:
- url: https://gateway.smallstep.com/api
security:
- JWT: []
tags:


# --- truncated at 32 KB (57 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/smallstep/refs/heads/main/openapi/smallstep-pki-architecture-api-openapi.yml