---
title: "Create an X.509 authentication certificate"
method: POST
path: "/orgs/{orgId}/authCerts"
tags: ["orgs/authCerts"]
---

# Create an X.509 authentication certificate

`POST /orgs/{orgId}/authCerts`

Create an X.509 certificate for an org to be used as a means of authentication against the api. The caller must have a superset of the scopes to be assigned via the roleId. Check the following link for how to authenticate https://openpath.readme.io/docs/using-the-api#using-signed-jwt-for-authentication<br/><br/>__JWT is required for this endpoint with at least one of the following scopes__: o:w,o:r,s-o:w,s-o:r,o{params.orgId}-cert:w,o{params.orgId}-cert:r<br/><br/>__Endpoint name__: createAuthCert

## Path parameters

- `orgId` integer, required

## Request body

- object
  - `certificate` string, required
  - `canOnlySelfModify` boolean
  - `name` string
  - `roleId` integer, required

## Response `200`

Successful

- object
  - `data` object
    - `id` integer, required
    - `certificate` string, required
    - `canOnlySelfModify` boolean
    - `name` string, nullable
    - `roleId` integer
    - `opal` string
    - `orgId` integer
  - `meta` object
    - `accessToken` object, nullable
      - `scopeUpdatedAt` string, date
    - `siteSpecificAccess` object, nullable
      - `isSiteSpecific` boolean
      - `siteIds` integer[], nullable
      - `siteIdsByScope` object, nullable
        - `string` integer[], nullable

---

[API](https://skmtc.net/openpath/apis/openpath-api-documentation.md) · [All operations](https://skmtc.net/openpath/apis/openpath-api-documentation/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/openpath/openpath-api-documentation/revisions/d8a888c114fa/schema)