API and inventory export

Authenticate API reads, retrieve the OpenAPI automation subset and export filtered certificate inventory.

API & export

Automate the routine reads.

Create an organisation-bound API token in Settings and store it in your secret environment. Its access remains bounded by the creator’s current role and membership.

Read-only · CLM_URL and CLM_API_TOKEN in your environment

curl --fail --silent --show-error \
  -H "Authorization: Bearer $CLM_API_TOKEN" \
  "$CLM_URL/api/v1/openapi.json" -o openapi.json

curl --fail --silent --show-error \
  -H "Authorization: Bearer $CLM_API_TOKEN" \
  "$CLM_URL/api/v1/inventory.csv?known=1&expires_within=30" \
  -o expiring-certificates.csv

OpenAPI 3.1 covers the documented automation subset, not every administrative endpoint. Inventory CSV exports all matching rows, independent of UI pagination. Treat exported names and endpoint metadata as sensitive. Honor HTTP 429 and Retry-After.