---
title: Get Keyless SSL Configuration
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[Keyless Certificates](https://developers.cloudflare.com/api/resources/keyless_certificates)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# Get Keyless SSL Configuration
GET/zones/{zone\_id}/keyless\_certificates/{keyless\_certificate\_id}
Get details for one Keyless SSL configuration.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
**Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key
The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.
**Example:**X-Auth-Email: user@example.com
The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.
**Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required)
`Trust and Safety Write``Trust and Safety Read``Zero Trust: PII Read``Zaraz Edit``Zaraz Read``Zaraz Admin``Access: Apps and Policies Revoke``Access: Apps and Policies Write``Access: Apps and Policies Read``Access: Apps and Policies Revoke``Access: Mutual TLS Certificates Write``Access: Organizations, Identity Providers, and Groups Write``Zone Settings Write``Zone Settings Read``Zone Read``DNS Read``Workers Scripts Write``Workers Scripts Read``Zone Write``Workers Routes Write``Workers Routes Read``Stream Write``Stream Read``SSL and Certificates Write``SSL and Certificates Read``Logs Write``Logs Read``Cache Purge``Page Rules Write``Page Rules Read``Load Balancers Write``Load Balancers Read``Firewall Services Write``Firewall Services Read``DNS Write``Apps Write``Analytics Read``Access: Apps and Policies Write``Access: Apps and Policies Read`
##### P ath ParametersExpand Collapse
zone\_id: string
Identifier.
maxLength32
[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>)
keyless\_certificate\_id: string
Keyless certificate identifier tag.
maxLength32
[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(method)%20get%20%3E%20(params)%20default%20%3E%20(param)%20keyless_certificate_id%20%3E%20(schema)>)
##### ReturnsExpand Collapse
errors: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: array of object {code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
success: true
Whether the API call was successful.
[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
result: optional KeylessCertificate { id, created\_on, enabled, 7 more }
id: string
Keyless certificate identifier tag.
maxLength32
Link to this property
created\_on: string
When the Keyless SSL was created.
formatdate-time
Link to this property
enabled: boolean
Whether or not the Keyless SSL is on or off.
Link to this property
host: string
The keyless SSL name.
formathostname
maxLength253
Link to this property
modified\_on: string
When the Keyless SSL was last modified.
formatdate-time
Link to this property
name: string
The keyless SSL name.
maxLength180
Link to this property
permissions: array of string
Available permissions for the Keyless SSL for the current user requesting the item.
Link to this property
port: number
The keyless SSL port used to communicate between Cloudflare and the client’s Keyless SSL server.
maxLength65535
Link to this property
status: "active"or "deleted"
Status of the Keyless SSL.
One of the following:
"active"
Link to this property
"deleted"
Link to this property
Link to this property
tunnel: optional Tunnel { private\_ip, vnet\_id }
Configuration for using Keyless SSL through a Cloudflare Tunnel.
private\_ip: string
Private IP of the Key Server Host.
Link to this property
vnet\_id: string
Cloudflare Tunnel Virtual Network ID.
Link to this property
Link to this property
[Link to this property](<#(resource)%20keyless_certificates%20%3E%20(method)%20get%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
### Get Keyless SSL Configuration
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/zones/$ZONE_ID/keyless_certificates/$KEYLESS_CERTIFICATE_ID \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
```
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"id": "4d2844d2ce78891c34d0b6c0535a291e",
"created_on": "2014-01-01T05:20:00Z",
"enabled": false,
"host": "example.com",
"modified_on": "2014-01-01T05:20:00Z",
"name": "example.com Keyless SSL",
"permissions": [
"#ssl:read",
"#ssl:edit"
],
"port": 24008,
"status": "active",
"tunnel": {
"private_ip": "10.0.0.1",
"vnet_id": "7365377a-85a4-4390-9480-531ef7dc7a3c"
}
}
}
```
##### Returns Examples
200 example
```
{
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"success": true,
"result": {
"id": "4d2844d2ce78891c34d0b6c0535a291e",
"created_on": "2014-01-01T05:20:00Z",
"enabled": false,
"host": "example.com",
"modified_on": "2014-01-01T05:20:00Z",
"name": "example.com Keyless SSL",
"permissions": [
"#ssl:read",
"#ssl:edit"
],
"port": 24008,
"status": "active",
"tunnel": {
"private_ip": "10.0.0.1",
"vnet_id": "7365377a-85a4-4390-9480-531ef7dc7a3c"
}
}
}
```