MQTT Brokers & Certificates

Define the external MQTT brokers that Data Stream Bridges publish to, and store their credentials. For an mqtts broker whose certificate cannot be verified against the system trust store, upload its CA certificate first and reference it from the broker configuration.

📄️Create an MQTT broker configuration

Create a reusable MQTT broker configuration.

📄️List MQTT broker configurations

Return MQTT broker configurations with paging.

📄️Get an MQTT broker configuration

Return a single MQTT broker configuration. Credential secrets are not returned in clear text.

📄️Replace an MQTT broker configuration

Update broker endpoint and protocol settings for an existing MQTT broker configuration.

📄️Delete an MQTT broker configuration

Delete an MQTT broker configuration. Configurations linked to existing bridges cannot be removed.

📄️Update MQTT broker credentials

Rotate stored credentials for an MQTT broker configuration.

📄️Upload an MQTT CA certificate

Upload a public PEM- or DER-encoded CA certificate for an mqtts broker.

📄️List MQTT CA certificates

Return the CA certificates uploaded for this organization, ordered by name. Each item carries `certificateId` (use it as a broker configuration's `tls.caCertificateId`), `name`, `thumbprint`, `expiresAt`, `isExpired`, and `isInUse` (`true` while any broker configuration references it, in which case it cannot be deleted). Certificate content is never returned.

📄️Delete an MQTT CA certificate

Delete a CA certificate. Rejected while any MQTT broker configuration in the tenant still references it through `tls.caCertificateId`. Remove or repoint those configurations first.