Certificate buckets

Certificate buckets API overview

Certificate buckets API allows integrators to group certificates into logical collections for bulk actions, organizational delegation, secret management, and rule execution within SCM.
This API supports creating buckets, updating configuration, assigning certificates, delegating organizations, and retrieving bucket content.

Certificate buckets API endpoints

The following table lists the endpoints for managing certificate buckets.
Click any action in the first column to open its API reference page.

1. Bucket creation & listing

Action	Method	Path	Description
List certificate buckets	GET	`/api/discovery/v1/bucket`	Retrieve all certificate buckets.
Create a certificate bucket	POST	`/api/discovery/v1/bucket`	Create a new certificate bucket.
Find a certificate bucket by ID	GET	`/api/discovery/v1/bucket/{bucketId}`	Retrieve details of a specific certificate bucket.

2. Bucket updates & deletion

Action	Method	Path	Description
Update a certificate bucket	PUT	`/api/discovery/v1/bucket/{bucketId}`	Update configuration of a certificate bucket.
Delete a certificate bucket	DELETE	`/api/discovery/v1/bucket/{bucketId}`	Remove a certificate bucket.
Reset certificate bucket client secret	PUT	`/api/discovery/v1/bucket/{bucketId}/reset-client-secret`	Regenerate the client secret used for bucket-related automation.

3. Organization delegation

Action	Method	Path	Description
Delegate organizations to a certificate bucket	PUT	`/api/discovery/v1/bucket/{bucketId}/delegations`	Assign one or more organizations to access and manage this bucket.

4. Certificate-level operations inside a bucket

Action	Method	Path	Description
Assign certificates to a certificate bucket	POST	`/api/discovery/v1/bucket/{bucketId}/assign`	Add certificates to a bucket for grouping or bulk operations.
List certificates in a certificate bucket	GET	`/api/discovery/v1/bucket/{bucketId}/certificates`	Retrieve certificates associated with a specified bucket.
Run rules against certificate bucket	POST	`/api/discovery/v1/bucket/{bucketId}/runrules`	Execute defined rules or workflows against all certificates in the bucket.