---
title: "Get Central Yamato Proxy Root Ca"
method: GET
path: "/v1/yamato/proxies/{deployment_id}/root-ca"
---

# Get Central Yamato Proxy Root Ca

`GET /v1/yamato/proxies/{deployment_id}/root-ca`

Deliver the provider shared root CA to a booting proxy over authenticated TLS.

The root CA private key is intentionally never placed in cloud-init user data
(durable and broadly readable via cloud APIs, IMDS, and launch templates). A
booting proxy fetches it once here, authenticated by its deployment sync token
and gated to a short post-provision window, then persists it locally.

## Path parameters

- `deployment_id` string, required

## Response `200`

Successful Response

- object

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/tabtabtab/apis/fastapi.md) · [All operations](https://skmtc.dev/tabtabtab/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/tabtabtab/fastapi/revisions/73961d1e6152/schema)