Get header inventory | HUMAN Documentation

curl -G https://api-gw.perimeterx.com/v1/pci/inventory/headers \
     -H "Authorization: Bearer <token>" \
     -d appId=PXabc123 \
     -d appId=PXdef456 \
     -d tld=domain1.com \
     -d tld=domain2.com \
     -d excludedStatuses=authorized \
     -d excludedStatuses=in_progress \
     -d from=1674313200000 \
     -d to=1674313200000 \
     -d skip=40 \
     -d take=10

{
  "paging": {
    "previous": "",
    "current": "https://localhost:80/v1/pci/inventory/headers?appId=PXabcd1234&tld=humansecurity.com&take=20&skip=0",
    "next": "",
    "count": 31
  },
  "data": [
    {
      "app_id": "PXabcd1234",
      "host_domain": "domain.com",
      "page": "https://cd.humansecurity.com/checkout.html",
      "page_key": "ac3887f3e1163d14c98609fd516be517",
      "name": "content-security-policy",
      "unreviewed_values": [
        "connect-src 'self' b.px-cdn.net https://*.px-cloud.net https://api-js.mixpanel.com/track/;"
      ],
      "first_seen": "2023-08-31T12:00:01.425Z",
      "last_seen": "2024-08-13T16:00:05.471Z",
      "status": "unreviewed",
      "status_category": "unreviewed"
    }
  ]
}

Returns a list of the PCI DSS payment page header inventory for the given Application ID and host domain. <Note> Headers must exceed HUMAN's internal appearance threshold before they are introduced into the system and appear in the response. This prevents testing and low volume data from interfering with data quality. </Note>

Returns a list of the PCI DSS payment page header inventory for the given Application ID and host domain.

Headers must exceed HUMAN’s internal appearance threshold before they are introduced into the system and appear in the response. This prevents testing and low volume data from interfering with data quality.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Query parameters

appIdlist of stringsRequired

An array of Application IDs to filter the relevant headers by. At least one ID is required.

tldlist of stringsRequired

An array of host domains to filter the relevant headers by. At least one domain is required.

excludedStatuseslist of enumsOptional

An array of script statuses that should be excluded from the results.

Allowed values:

fromintegerOptional

A timestamp, in milliseconds, indicating from what point in time to filter the results by. If omitted, defaults to the **later** time between the following: 1. The last time [script grouping](/applications/cd-glossary#grouping) was performed plus one hour. 2. One year ago. Further, if a value is provided and it is **earlier** than the default calculated by the above logic, then the default will be used instead.

tointegerOptional

A timestamp, in milliseconds, indicating until what point in time to filter the results by. Defaults to the current time.

skipintegerOptionalDefaults to 0

The number of headers to offset pagination by when returning the results.

takeintegerOptionalDefaults to 20

The number of headers to display per page when returning the results.

Response

Success

pagingobject

datalist of objects

Errors

401

Unauthorized Error

422

Unprocessable Entity Error

500

Internal Server Error

$	curl -G https://api-gw.perimeterx.com/v1/pci/inventory/headers \
>	-H "Authorization: Bearer <token>" \
>	-d appId=PXabc123 \
>	-d appId=PXdef456 \
>	-d tld=domain1.com \
>	-d tld=domain2.com \
>	-d excludedStatuses=authorized \
>	-d excludedStatuses=in_progress \
>	-d from=1674313200000 \
>	-d to=1674313200000 \
>	-d skip=40 \
>	-d take=10

1	{
2	"paging": {
3	"previous": "",
4	"current": "https://localhost:80/v1/pci/inventory/headers?appId=PXabcd1234&tld=humansecurity.com&take=20&skip=0",
5	"next": "",
6	"count": 31
7	},
8	"data": [
9	{
10	"app_id": "PXabcd1234",
11	"host_domain": "domain.com",
12	"page": "https://cd.humansecurity.com/checkout.html",
13	"page_key": "ac3887f3e1163d14c98609fd516be517",
14	"name": "content-security-policy",
15	"unreviewed_values": [
16	"connect-src 'self' b.px-cdn.net https://*.px-cloud.net https://api-js.mixpanel.com/track/;"
17	],
18	"first_seen": "2023-08-31T12:00:01.425Z",
19	"last_seen": "2024-08-13T16:00:05.471Z",
20	"status": "unreviewed",
21	"status_category": "unreviewed"
22	}
23	]
24	}