Venafi

Venafi SSH Management APIs API

The SSH Management APIs allow to manage device keys and keysets. This interface is valid only if you purchased SSH Manager for Machines. All product-supported operations are exposed via this API, including key operations (addition, removal, and editing of keys), rotation and methods to get the actual state of data. For more information about the SSH objects, see the Web SDK Object class reference.

GitHub OpenAPI

Operations 36

GET /vedsdk/ssh/rules Search key authorization rules #
POST /vedsdk/ssh/TestDeviceConnection Returns connection status for provided devices #
POST /vedsdk/ssh/ImportKeyUsageData Imports key usage from a Unix or Linux host syslog #
POST /vedsdk/ssh/KeyUsage Finds all key usage records matching the specified filtering criteria #
POST /vedsdk/ssh/RemoveKey Marks a key for deletion #
POST /vedsdk/ssh/CancelKeyOperation Cancels any running key operation. Can also rollback a key to its original state #
POST /vedsdk/ssh/RetryKeyOperation Retries any failing operation (addition, removal, editing) on specified key #
POST /vedsdk/ssh/Rotate Starts Synchronous Rotation of a specific keyset #
POST /vedsdk/ssh/RotateNonBlocking Submits Rotation request of specific keyset #
POST /vedsdk/ssh/RollbackNonBlocking Submits Rollback request of specific keyset #
POST /vedsdk/ssh/CancelRotation Cancels rotation of the specified keyset if it is running, or rolls back the… #
POST /vedsdk/ssh/RetryRotation Retries rotation of specified keyset #
POST /vedsdk/ssh/EditKeyOptions Changes Source Restrictions, and Forced commands in an authorized keys file #
POST /vedsdk/ssh/EditSelfServiceAuthorizedKey Changes location, notes, Source Restrictions, and Forced commands in an… #
POST /vedsdk/ssh/AddSelfServicePrivateKey Assigns an existing keyset to a policy folder #
POST /vedsdk/ssh/AddSelfServiceAuthorizedKey Add an authorization key to a keyset #
POST /vedsdk/ssh/ConfirmSelfServiceKeyInstallation Verifies that a user manually installed a private key #
POST /vedsdk/ssh/MoveKeysetsToPolicy Moves a list of keysets to a policy folder #
POST /vedsdk/ssh/ExportSelfServiceAuthorizedKey Downloads an authorized key #
POST /vedsdk/ssh/ExportSelfServicePrivateKey Downloads a private key #
POST /vedsdk/ssh/SkipKeyRotation Skip key rotation #
POST /vedsdk/ssh/AddUserPrivateKey Installs a new user private key on a device #
POST /vedsdk/ssh/AddHostPrivateKey Creates and installs a new private key on a host device #
POST /vedsdk/ssh/AddAuthorizedKey Creates an Open SSH Authorized key for provisioning to a device #
POST /vedsdk/ssh/AddKnownHostKey Creates a public key for a host #
POST /vedsdk/ssh/ImportAuthorizedKey Adds or reuses a Base64 public key for a device #
POST /vedsdk/ssh/ImportPrivateKey Adds or reuses a Base64 private key for a device #
POST /vedsdk/ssh/ChangePrivateKeyPassphrase Changes the private key passphrase for a keyset #
POST /vedsdk/ssh/SetUnmatchedKeysetPassphrase Sets the passphrase on a keyset that is missing the encrypted private key #
POST /vedsdk/ssh/DeleteUnmatchedKeyset Deletes an unmatched keyset that is missing the encrypted private key… #
POST /vedsdk/ssh/KeyDetails Returns detailed key data #
POST /vedsdk/ssh/Devices Finds devices in the Policy tree that match the filtering criteria #
GET /vedsdk/ssh/KeysetDetails Provides information about every device that shares the same keyset #
POST /vedsdk/ssh/KeysetDetails Returns private and public key pairs that identify details about a device #
POST /vedsdk/ssh/ApproveKeyOperation Approves any key operation that has a Pending Approval status in a workflow #
POST /vedsdk/ssh/RejectKeyOperation Rejects any key operation that has a Pending Approval status in a workflow #

Documentation

📖
Documentation
https://developer.venafi.com/tlsprotectcloud/reference/tls-protect-overview
📖
Documentation
https://docs.venafi.com/Docs/currentSDK/TopNav/Content/SDK/WebSDK/cco-sdk-GettingStarted.php

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/openapi/venafi-ssh-management-apis-api-openapi.yml

Other Resources

🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/asyncapi/venafi-certificate-manager-saas-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/venafi-ssh-management-apis-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

venafi-ssh-management-apis-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Trust Protection Foundation WebSDK SSH Management APIs API
  description: '# Introduction

    The Trust Protection Foundation Web SDK is a subset of REST APIs that allow you to:

    * Automate certificate management

    * Integrate with DevOps processes

    * Discover machine identities

    * Extract data to integrate with data warehouses

    * Perform bulk actions

    * Set up and administer Trust Protection Foundation

    * Onboard teams

    * Create custom, automated business logic and flows between internal systems


    All these use cases can be accomplished using the Trust Protection Foundation REST…'
  version: 26.1.1
servers:
- url: /
  description: Current Host
- url: https://REPLACEdnsnameME/
  description: System
- url: https://{dnsname}/
  description: Configurable Hostname
  variables:
    dnsname:
      default: localhost
      description: Production API Hostname
security:
- AccessToken: []
tags:


# --- truncated at 32 KB (96 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/venafi/refs/heads/main/openapi/venafi-ssh-management-apis-api-openapi.yml