---
title: Keyless Certificates
---

[Skip to content](#%5Ftop) 

[API Reference](https://developers.cloudflare.com/api/typescript)

Copy Markdown

Open in **Claude**

Open in **ChatGPT**

Open in **Cursor**

---

**Copy Markdown**

**View as Markdown**

# Keyless Certificates

##### [List Keyless SSL Configurations](https://developers.cloudflare.com/api/typescript/resources/keyless%5Fcertificates/methods/list)

client.keylessCertificates.list(KeylessCertificateListParams { zone\_id } params, RequestOptionsoptions?): SinglePage<[KeylessCertificate](https://developers.cloudflare.com/api/typescript/resources/keyless%5Fcertificates#%28resource%29%20keyless%5Fcertificates%20%3E%20%28model%29%20keyless%5Fcertificate%20%3E%20%28schema%29) { id, created\_on, enabled, 7 more } \>

GET/zones/{zone\_id}/keyless\_certificates

##### [Get Keyless SSL Configuration](https://developers.cloudflare.com/api/typescript/resources/keyless%5Fcertificates/methods/get)

client.keylessCertificates.get(stringkeylessCertificateID, KeylessCertificateGetParams { zone\_id } params, RequestOptionsoptions?): [KeylessCertificate](https://developers.cloudflare.com/api/typescript/resources/keyless%5Fcertificates#%28resource%29%20keyless%5Fcertificates%20%3E%20%28model%29%20keyless%5Fcertificate%20%3E%20%28schema%29) { id, created\_on, enabled, 7 more } 

GET/zones/{zone\_id}/keyless\_certificates/{keyless\_certificate\_id}

##### [Create Keyless SSL Configuration](https://developers.cloudflare.com/api/typescript/resources/keyless%5Fcertificates/methods/create)

client.keylessCertificates.create(KeylessCertificateCreateParams { zone\_id, certificate, host, 4 more } params, RequestOptionsoptions?): [KeylessCertificate](https://developers.cloudflare.com/api/typescript/resources/keyless%5Fcertificates#%28resource%29%20keyless%5Fcertificates%20%3E%20%28model%29%20keyless%5Fcertificate%20%3E%20%28schema%29) { id, created\_on, enabled, 7 more } 

POST/zones/{zone\_id}/keyless\_certificates

##### [Edit Keyless SSL Configuration](https://developers.cloudflare.com/api/typescript/resources/keyless%5Fcertificates/methods/edit)

client.keylessCertificates.edit(stringkeylessCertificateID, KeylessCertificateEditParams { zone\_id, enabled, host, 3 more } params, RequestOptionsoptions?): [KeylessCertificate](https://developers.cloudflare.com/api/typescript/resources/keyless%5Fcertificates#%28resource%29%20keyless%5Fcertificates%20%3E%20%28model%29%20keyless%5Fcertificate%20%3E%20%28schema%29) { id, created\_on, enabled, 7 more } 

PATCH/zones/{zone\_id}/keyless\_certificates/{keyless\_certificate\_id}

##### [Delete Keyless SSL Configuration](https://developers.cloudflare.com/api/typescript/resources/keyless%5Fcertificates/methods/delete)

client.keylessCertificates.delete(stringkeylessCertificateID, KeylessCertificateDeleteParams { zone\_id } params, RequestOptionsoptions?): [KeylessCertificateDeleteResponse](https://developers.cloudflare.com/api/typescript/resources/keyless%5Fcertificates#%28resource%29%20keyless%5Fcertificates%20%3E%20%28model%29%20keyless%5Fcertificate%5Fdelete%5Fresponse%20%3E%20%28schema%29) { id } 

DELETE/zones/{zone\_id}/keyless\_certificates/{keyless\_certificate\_id}

##### ModelsExpand Collapse 

KeylessCertificate { id, created\_on, enabled, 7 more } 

id: string

Keyless certificate identifier tag.

maxLength32

created\_on: string

When the Keyless SSL was created.

formatdate-time

enabled: boolean

Whether or not the Keyless SSL is on or off.

host: string

The keyless SSL name.

formathostname

maxLength253

modified\_on: string

When the Keyless SSL was last modified.

formatdate-time

name: string

The keyless SSL name.

maxLength180

permissions: Array<string\>

Available permissions for the Keyless SSL for the current user requesting the item.

port: number

The keyless SSL port used to communicate between Cloudflare and the client’s Keyless SSL server.

maxLength65535

status: "active" | "deleted"

Status of the Keyless SSL.

One of the following:

"active"

"deleted"

tunnel?: [Tunnel](https://developers.cloudflare.com/api/typescript/resources/keyless%5Fcertificates#%28resource%29%20keyless%5Fcertificates%20%3E%20%28model%29%20tunnel%20%3E%20%28schema%29) { private\_ip, vnet\_id } 

Configuration for using Keyless SSL through a Cloudflare Tunnel.

Tunnel { private\_ip, vnet\_id } 

Configuration for using Keyless SSL through a Cloudflare Tunnel.

private\_ip: string

Private IP of the Key Server Host.

vnet\_id: string

Cloudflare Tunnel Virtual Network ID.

KeylessCertificateDeleteResponse { id } 

id?: string

Identifier.

maxLength32