JUMP TOAPIApplication Security APIAPI summaryOpenAPI schemaGet StartedSet up your API tokenAPI conceptsAPI workflowsActivate with invalid hostnamesAdd a new hostname to a configurationAdd a new custom rule to a configurationExport a configuration versionRate limitingEnumeration valuesExport condition type valuesExport match condition type valuesExport header valuesCondition valuesCustomRule condition type valuesDeny name valuesException selector valuesRecommendation selector valuesLogging option values (Beta)Errors400401403404409429Configuration settingsGeneral configuration settingsCreate a configurationpostList configurationsgetGet a security configurationgetRename a security configurationputRemove a configurationdeleteClone a configuration versionpostList configuration versionsgetGet configuration version detailsgetRemove a configuration versiondeleteGet the version notesgetUpdate the version notesputShared resources: Custom rulesCreate a custom rulepostList custom rulesgetGet a custom rulegetModify a custom ruleputRemove a custom ruledeleteFailover hostnamesList failover hostnamesgetEvasive path matchGet the evasive path match settings for a configurationgetModify evasive path match settings for a configurationputHTTP header logsGet the HTTP header log settings for a configurationgetModify HTTP header log settings for a configurationputAttack payload logsGet the attack payload log settings for a configurationgetModify attack payload log settings for a configurationputPII learningGet PII learning settings for a configurationgetEnable PII learning settings for a configurationputPragma settingsGet Pragma settings for a configurationgetModify Pragma settings for a configurationputPrefetch requestsGet prefetch requestsgetModify prefetch requestsputRequest body sizeGet request body size settings for a configurationgetModify request body inspection limit settings for a configurationputBypass network listsGet the bypass network lists settingsgetModify the bypass network lists settingsputShared resources: Custom deny actionsCreate a custom deny actionpostList custom deny actionsgetGet a custom deny actiongetModify a custom deny actionputRemove a custom deny actiondeleteMatch targetsGet the hostname coverage match targetsgetCreate a match targetpostList match targetsgetModify match target orderputGet a match targetgetModify a match targetputRemove a match targetdeleteHostnamesList hostname overlapsgetList selectable hostnamesgetList selected hostnamesgetModify selected hostnamesputShared resources: Malware policiesCreate a malware policypostList malware policiesgetList supported malware policy content typesgetGet a malware policygetModify a malware policyputRemove a malware policydeleteShared resources: Rate policiesCreate a rate policypostList rate policiesgetGet a rate policygetModify a rate policyputRemove a rate policydeleteShared resources: Reputation profilesCreate a reputation profilepostList reputation profilesgetGet a reputation profilegetModify a reputation profileputRemove a reputation profiledeleteSIEM settingsGet SIEM settingsgetModify SIEM settingsputGet SIEM versionsgetURL protection policiesCreate a URL protection policypostList URL protection policiesgetGet a URL protection policygetModify a URL protection policyputRemove a URL protection policydeleteSecurity policiesGeneral policy settingsClone or create a security policypostList security policiesgetGet a security policygetModify a security policyputRemove a security policydeleteEvasive path matchGet evasive path match settinggetModify evasive path match settingputHTTP header logsGet HTTP header log settingsgetModify HTTP header log settingsputAttack payload logsGet attack payload logging settings for a policygetModify Attack Payload Logging settings for a policyputPragma settingsGet Pragma settings for a security policygetModify Pragma settings for a security policyputRequest body inspection limitsGet request body inspection limit settings for a security policygetModify request body size settings for a security policyputAPI endpointsList API endpointsgetAPI request constraintsList API request constraints and actionsgetModify the request constraint action for all APIputModify an API request constraint's actionputWAF rules: Attack groupsList attack groupsgetGet the action for an attack groupgetModify the action for an attack groupputGet the exceptions of an attack groupgetModify the exceptions of an attack groupputBypass network listsGet the bypass network lists settings for a security policygetModify the bypass network lists settings for a security policyputCustom rule actionsList custom rule actionsgetModify a custom rule actionputIP/Geo Firewall settingsGet the IP/Geo Firewall settingsgetUpdate the IP Geo Firewall settingsputMalware policy actionsList malware policy actionsgetModify a malware policy actionputWAF rules: Update modeGet the current modegetModify the modeputWAF rules: Penalty boxGet the penalty boxgetModify the penalty boxputWAF rules: ProtectionsGet protectionsgetModify protectionsputRate policy actionsList rate policy actionsgetModify a rate policy actionputWAF rules: Tuning recommendationsRespond to exception recommendationspostGet tuning recommendations for a policygetList tuning recommendations for an attack groupgetList tuning recommendations for a rulegetReputation analysisGet the reputation analysis settingsgetUpdate the reputation analysis settingsputClient reputationList reputation profile actionsgetGet the action for a reputation profilegetModify the action for a reputation profileputWAF rules: General settingsList rulesgetUpgrade KRS rulesetputGet adaptive intelligence settinggetUpdate adaptive intelligence settingputGet upgrade detailsgetGet the action for a rulegetModify the action for a ruleputGet the conditions and exceptions of a rulegetModify the conditions and exceptions of a ruleputHostnamesList selected hostnames for a security policygetModify selected hostnames for a security policyputSlow POST protectionsGet slow POST protection settingsgetModify slow POST protection settingsputURL protection policy actionsList URL protection policy actionsgetModify a URL protection policy actionputEvaluation modeConfiguration: Evaluation hostnamesProtect evaluation hostnamesputList evaluation hostnamesgetModify evaluation hostnamesputSecurity policy: Evaluation modeSet evaluation modepostSecurity policy: Evaluation attack groupsList evaluation attack groupsgetGet the action for an evaluation attack groupgetModify the action for an evaluation attack groupputSecurity policy: Conditions and exceptionsGet the exceptions of an evaluation attack groupgetModify the exceptions of an evaluation attack groupputGet the conditions and exceptions for an evaluation rulegetModify the conditions and exceptions for an evaluation ruleputSecurity policy: Evaluation hostnamesList evaluation hostnames for a security policygetModify evaluation hostnames for a security policyputProtect evaluation hostnames for a security policyputSecurity policy: Evaluation penalty boxGet the penalty box for a policy in evaluation modegetModify the evaluation penalty boxputSecurity policy: Evaluation rulesList evaluation rulesgetGet the action of an evaluation rulegetModify the action of an evaluation ruleputActivation and exportActivationsActivate a configuration versionpostActivation statusGet an activation request statusgetGet activation statusgetActivation historyList activation historygetConfiguration version exportExport a configuration versiongetUtilities and account dataDiscovered APIsList discovered APIsgetGet a discovered APIgetEndpointsModify an API's visibilityputCreate an endpoint or resourcepostList discovered API endpointsgetSubscriptionsSubscribe or unsubscribe to recommendation emailspostList subscribersgetContracts and groupsList contracts and groupsgetAvailable hostnamesList available hostnames for a new configurationgetHostname coverageGet Hostname CoveragegetCreate a custom rulepost https://{hostname}/appsec/v1/configs/{configId}/custom-rulesCreates a new custom rule. Products: All.