# Certificate Authority API API

> Certificate Authority API API on Apizie: 25 endpoints (Gets the latest state of a long-running operation. Clients can use this method to poll the operation result…, Update a CertificateTemplate., Deletes a long-running operation. This method indicates that the client is no longer interested in the…, Lists information about the supported locations for this service. This method lists locations based on the…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/analytics:googleapis-privateca/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `analytics:googleapis-privateca`
- Category: Analytics
- Status: byok
- Source: https://cloud.google.com/
- Page: https://zieapi.vercel.app/api/analytics/googleapis-privateca
- OpenAPI: https://zieapi.vercel.app/api/analytics/googleapis-privateca/openapi.json

The Certificate Authority Service API is a highly-available, scalable service that enables you to simplify and automate the management of private certificate authorities (CAs) while staying in control of your private…

## Endpoints

### Gets the latest state of a long-running operation. Clients can use this method to poll the operation result…
`GET https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-operations-get` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | The name of the operation resource. |

### Update a CertificateTemplate.
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-certificate-templates-patch` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Identifier. The resource name for this CertificateTemplate in the format `projects/*/locations/*/certificateTemplates/*`. |
| requestId | string | no | Optional. An ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore… |
| updateMask | string | no | Required. A list of fields to be updated in this request. |
| body | object | yes | JSON request body |

### Deletes a long-running operation. This method indicates that the client is no longer interested in the…
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-operations-delete` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | The name of the operation resource to be deleted. |

### Lists information about the supported locations for this service. This method lists locations based on the…
`GET https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| extraLocationTypes | string | no | Optional. Do not use this field unless explicitly documented otherwise. This is primarily for internal usage. |
| filter | string | no | A filter to narrow down results to a preferred subset. The filtering language accepts strings like `"displayName=tokyo"`, and is… |
| name | string | yes | The resource that owns the locations collection, if applicable. |
| pageSize | integer | no | The maximum number of results to return. If not set, the service selects a default. |
| pageToken | string | no | A page token received from the `next_page_token` field in the response. Send that page token to receive the subsequent page. |

### Lists CaPools.
`GET https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| filter | string | no | Optional. Only include resources that match the filter in the response. |
| orderBy | string | no | Optional. Specify how the results should be sorted. |
| pageSize | integer | no | Optional. Limit on the number of CaPools to include in the response. Further CaPools can subsequently be obtained by including the… |
| pageToken | string | no | Optional. Pagination token, returned earlier via ListCaPoolsResponse.next_page_token. |
| parent | string | yes | Required. The resource name of the location associated with the CaPools, in the format `projects/*/locations/*`. |

### Create a CaPool.
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-create` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| caPoolId | string | no | Required. It must be unique within a location and match the regular expression `[a-zA-Z0-9_-]{1,63}` |
| parent | string | yes | Required. The resource name of the location associated with the CaPool, in the format `projects/*/locations/*`. |
| requestId | string | no | Optional. An ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore… |
| body | object | yes | JSON request body |

### FetchCaCerts returns the current trust anchor for the CaPool. This will include CA certificate chains for…
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-fetch-ca-certs` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| caPool | string | yes | Required. The resource name for the CaPool in the format `projects/*/locations/*/caPools/*`. |
| body | object | yes | JSON request body |

### Gets the access control policy for a resource. Returns an empty policy if the resource exists and does not…
`GET https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-certificate-templates-get-iam-p` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| options.requestedPolicyVersion | integer | no | Optional. The maximum policy version that will be used to format the policy. Valid values are 0, 1, and 3. Requests specifying an invalid… |
| resource | string | yes | REQUIRED: The resource for which the policy is being requested. See [Resource names](https://cloud.google.com/apis/design/resource_names)… |

### Sets the access control policy on the specified resource. Replaces any existing policy. Can return…
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-certificate-templates-set-iam-p` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| resource | string | yes | REQUIRED: The resource for which the policy is being specified. See [Resource names](https://cloud.google.com/apis/design/resource_names)… |
| body | object | yes | JSON request body |

### Returns permissions that a caller has on the specified resource. If the resource does not exist, this will…
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-certificate-templates-test-iam` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| resource | string | yes | REQUIRED: The resource for which the policy detail is being requested. See [Resource… |
| body | object | yes | JSON request body |

### Activate a CertificateAuthority that is in state AWAITING_USER_ACTIVATION and is of type SUBORDINATE. After…
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-certificate-authoritie` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`. |
| body | object | yes | JSON request body |

### Lists CertificateAuthorities.
`GET https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-certificate-authoritie-2` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| filter | string | no | Optional. Only include resources that match the filter in the response. |
| orderBy | string | no | Optional. Specify how the results should be sorted. |
| pageSize | integer | no | Optional. Limit on the number of CertificateAuthorities to include in the response. Further CertificateAuthorities can subsequently be… |
| pageToken | string | no | Optional. Pagination token, returned earlier via ListCertificateAuthoritiesResponse.next_page_token. |
| parent | string | yes | Required. The resource name of the CaPool associated with the CertificateAuthorities, in the format `projects/*/locations/*/caPools/*`. |

### Create a new CertificateAuthority in a given Project and Location.
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-certificate-authoritie-3` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| certificateAuthorityId | string | no | Required. It must be unique within a location and match the regular expression `[a-zA-Z0-9_-]{1,63}` |
| parent | string | yes | Required. The resource name of the CaPool associated with the CertificateAuthorities, in the format `projects/*/locations/*/caPools/*`. |
| requestId | string | no | Optional. An ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore… |
| body | object | yes | JSON request body |

### Disable a CertificateAuthority.
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-certificate-authoritie-4` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`. |
| body | object | yes | JSON request body |

### Enable a CertificateAuthority.
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-certificate-authoritie-5` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`. |
| body | object | yes | JSON request body |

### Fetch a certificate signing request (CSR) from a CertificateAuthority that is in state…
`GET https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-certificate-authoritie-6` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`. |

### Undelete a CertificateAuthority that has been deleted.
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-certificate-authoritie-7` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. The resource name for this CertificateAuthority in the format `projects/*/locations/*/caPools/*/certificateAuthorities/*`. |
| body | object | yes | JSON request body |

### Lists CertificateRevocationLists.
`GET https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-certificate-authoritie-8` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| filter | string | no | Optional. Only include resources that match the filter in the response. |
| orderBy | string | no | Optional. Specify how the results should be sorted. |
| pageSize | integer | no | Optional. Limit on the number of CertificateRevocationLists to include in the response. Further CertificateRevocationLists can… |
| pageToken | string | no | Optional. Pagination token, returned earlier via ListCertificateRevocationListsResponse.next_page_token. |
| parent | string | yes | Required. The resource name of the location associated with the CertificateRevocationLists, in the format… |

### Lists Certificates.
`GET https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-certificates-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| filter | string | no | Optional. Only include resources that match the filter in the response. For details on supported filters and syntax, see [Certificates… |
| orderBy | string | no | Optional. Specify how the results should be sorted. For details on supported fields and syntax, see [Certificates Sorting… |
| pageSize | integer | no | Optional. Limit on the number of Certificates to include in the response. Further Certificates can subsequently be obtained by including… |
| pageToken | string | no | Optional. Pagination token, returned earlier via ListCertificatesResponse.next_page_token. |
| parent | string | yes | Required. The resource name of the parent associated with the Certificates, in the format `projects/*/locations/*/caPools/*`. The parent… |

### Create a new Certificate in a given Project, Location from a particular CaPool.
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-certificates-create` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| certificateId | string | no | Optional. It must be unique within a location and match the regular expression `[a-zA-Z0-9_-]{1,63}`. This field is required when using a… |
| issuingCertificateAuthorityId | string | no | Optional. The resource ID of the CertificateAuthority that should issue the certificate. This optional field will ignore the… |
| parent | string | yes | Required. The resource name of the CaPool associated with the Certificate, in the format `projects/*/locations/*/caPools/*`. |
| requestId | string | no | Optional. An ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore… |
| validateOnly | boolean | no | Optional. If this is true, no Certificate resource will be persisted regardless of the CaPool's tier, and the returned Certificate will… |
| body | object | yes | JSON request body |

### Revoke a Certificate.
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-ca-pools-certificates-revoke` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | Required. The resource name for this Certificate in the format `projects/*/locations/*/caPools/*/certificates/*`. |
| body | object | yes | JSON request body |

### Lists CertificateTemplates.
`GET https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-certificate-templates-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| filter | string | no | Optional. Only include resources that match the filter in the response. |
| orderBy | string | no | Optional. Specify how the results should be sorted. |
| pageSize | integer | no | Optional. Limit on the number of CertificateTemplates to include in the response. Further CertificateTemplates can subsequently be… |
| pageToken | string | no | Optional. Pagination token, returned earlier via ListCertificateTemplatesResponse.next_page_token. |
| parent | string | yes | Required. The resource name of the location associated with the CertificateTemplates, in the format `projects/*/locations/*`. |

### Create a new CertificateTemplate in a given Project and Location.
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-certificate-templates-create` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| certificateTemplateId | string | no | Required. It must be unique within a location and match the regular expression `[a-zA-Z0-9_-]{1,63}` |
| parent | string | yes | Required. The resource name of the location associated with the CertificateTemplate, in the format `projects/*/locations/*`. |
| requestId | string | no | Optional. An ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore… |
| body | object | yes | JSON request body |

### Starts asynchronous cancellation on a long-running operation. The server makes a best effort to cancel the…
`POST https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-operations-cancel` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| name | string | yes | The name of the operation resource to be cancelled. |
| body | object | yes | JSON request body |

### Lists operations that match the specified filter in the request. If the server doesn't support this method,…
`GET https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-operations-list` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| filter | string | no | The standard list filter. |
| name | string | yes | The name of the operation's parent resource. |
| pageSize | integer | no | The standard list page size. |
| pageToken | string | no | The standard list page token. |
| returnPartialSuccess | boolean | no | When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the… |

## Example
```
curl "https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-operations-get" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Certificate Authority API API?
Create a free Apizie key, then send GET https://zieapi.vercel.app/v1/analytics:googleapis-privateca/privateca-projects-locations-operations-get with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Certificate Authority API API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Certificate Authority API itself also needs your own key from googleapis.com.

### Can AI agents use the Certificate Authority API API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key analytics:googleapis-privateca.

### What is the status of the Certificate Authority API API?
Needs your own provider key (bring your own key)