Certificate Manager SaaS APIs

Certificate Manager SaaS has two APIs. Both use the same API key and reach the same certificate inventory, so you can mix them in one integration.

	REST	GraphQL
Endpoint	https://api.venafi.cloud (US), plus regional URLs	https://api.venafi.cloud/graphql
Shape	One URL per resource and action	One endpoint. You choose the fields you get back
Good for	Single actions such as requesting, importing, or retiring a certificate	Reports and lookups that read related objects (certificates, installations, applications) in one call
Reference	REST overview	GraphQL overview
Try it	The Send API Request panel on each endpoint page	Interactive Playground

Authentication

Both APIs authenticate with a Certificate Manager SaaS API key sent in the tppl-api-key HTTP header. Keep it secret, and don't commit it to source control.

Region URLs

The REST API is served from the region that hosts your tenant:

• US: https://api.venafi.cloud
• EU: https://api.eu.venafi.cloud
• AU: https://api.au.venafi.cloud
• UK: https://api.uk.venafi.cloud
• SG: https://api.sg.venafi.cloud
• CA: https://api.ca.venafi.cloud

HTTPS is required for every request.

Next steps

• REST overview: conventions, JSON format, and code samples for the REST API.
• GraphQL getting started: authentication, your first query, pagination, and error handling.