---
title: "Platform operators: create or update a price-list entry (fresh session and a reason required; logged)"
method: POST
path: "/operator/certificates/products"
tags: ["Certificates"]
---

# Platform operators: create or update a price-list entry (fresh session and a reason required; logged)

`POST /operator/certificates/products`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/operator/certificates/products`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Request body

- object
  - `id` string, uuid: omit to create
  - `provider` string, required
  - `providerProductId` string, required
  - `name` string, required
  - `description` string
  - `validation` 'dv' | 'ov' | 'ev', required
  - `wildcard` boolean
  - `multiDomain` boolean
  - `includedNames` integer
  - `maxNames` integer
  - `extraNamePrice` integer, nullable
  - `periodMonths` union
    - 12
    - 24
    - 36
    - 48
    - 60
  - `priceAmount` integer, required: sale price in minor units
  - `currency` string, required
  - `active` boolean
  - `sort` integer
  - `reason` string, required

## Response `200`

Saved

- object
  - `id` string, uuid, required
  - `name` string, required
  - `description` string, nullable, required
  - `provider` string, required
  - `validation` 'dv' | 'ov' | 'ev', required
  - `wildcard` boolean, required
  - `multiDomain` boolean, required
  - `includedNames` integer, required
  - `maxNames` integer, required
  - `extraNamePrice` integer, nullable, required: minor units per name beyond includedNames
  - `periodMonths` integer, required
  - `price` object, required
    - `amount` integer, required: minor units
    - `currency` string, required
  - `active` boolean, required
  - `providerProductId` string: product id at the reseller (operator views only)

## Other responses

- `400`: Invalid request (code invalid_request); details.problems lists every certificate problem
- `401`: Missing or invalid session/token (code unauthorized)
- `403`: Authenticated but not permitted (code forbidden)
- `404`: Not found or not visible to the caller (code not_found)
- `409`: Conflicting state (code conflict)
- `429`: Too many requests (code rate_limited); see Retry-After
- `501`: Not available on this server (code not_configured)
- `503`: Certificate provider unavailable (code provider_unavailable)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)