Get script inventory | HUMAN Documentation

curl -G https://api-gw.perimeterx.com/v1/pci/inventory/scripts \
     -H "Authorization: Bearer <token>" \
     -d appId=PXabc123 \
     -d appId=PXdef456 \
     -d tld=domain1.com \
     -d tld=domain2.com \
     -d excludedStatuses=authorized \
     -d excludedStatuses=in_progress \
     -d from=1674313200000 \
     -d to=1674313200000 \
     -d skip=40 \
     -d take=10 \
     -d include=cookies \
     -d include=domains

{
  "paging": {
    "previous": "",
    "current": "https://localhost:80/v1/pci/inventory/scripts?appId=PXabcd1234&tld=humansecurity.com&take=1&skip=0",
    "next": "https://localhost:80/v1/pci/inventory/scripts?appId=PXabcd1234&tld=humansecurity.com&take=1&skip=1",
    "count": 31
  },
  "data": [
    {
      "key": "aaa111bbb222ccc333ddd444",
      "script_url": "cdn.mxpnl.com/libs/mixpanel-2-latest.min.js",
      "app_id": "PXabcd1234",
      "host_domain": "humansecurity.com",
      "type": "third_party",
      "vendor": "MixPanel",
      "first_seen": "2023-10-19T00:00:00Z",
      "last_seen": "2024-08-29T06:00:12Z",
      "risk": {
        "level": "high",
        "reason": "Credit card access is being made by a third party script"
      },
      "page_types": [
        "string"
      ],
      "status": "unreviewed",
      "status_category": "unreviewed",
      "justification": "string",
      "pages": [
        "string"
      ]
    }
  ]
}

Returns a list of PCI DSS payment page script inventory for the given Application ID and host domain. <Note> Scripts must exceed HUMAN's internal appearance threshold before they are introduced into the system and appear in the response. This prevents testing and low volume data from interfering with data quality. </Note>

Returns a list of PCI DSS payment page script inventory for the given Application ID and host domain.

Scripts must exceed HUMAN’s internal appearance threshold before they are introduced into the system and appear in the response. This prevents testing and low volume data from interfering with data quality.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Query parameters

appIdlist of stringsRequired

An array of Application IDs to filter the relevant scripts by. At least one ID is required.

tldlist of stringsRequired

An array of host domains to filter the relevant scripts by. At least one domain is required.

excludedStatuseslist of enumsOptional

An array of script statuses that should be excluded from the results.

Allowed values:

fromintegerOptional

A timestamp, in milliseconds, indicating from what point in time to filter the results by. If omitted, defaults to the **later** time between the following: 1. The last time [script grouping](/applications/cd-glossary#grouping) was performed plus one hour. 2. One year ago. Further, if a value is provided and it is **earlier** than the default calculated by the above logic, then the default will be used instead.

tointegerOptional

A timestamp, in milliseconds, indicating until what point in time to filter the results by. Defaults to the current time.

skipintegerOptionalDefaults to 0

The number of scripts to offset pagination by when returning the results.

takeintegerOptionalDefaults to 20

The number of scripts to display per page when returning the results.

includelist of enumsOptional

Controls which extra fields are computed and returned on each script in the inventory response. Omitting include (or sending an empty list) keeps the response smaller by not loading cookie connections, value access, external domains, or user exposure metrics unless requested.

Allowed values:

Response

Success

pagingobject

datalist of objects

Errors

401

Unauthorized Error

422

Unprocessable Entity Error

500

Internal Server Error

$	curl -G https://api-gw.perimeterx.com/v1/pci/inventory/scripts \
>	-H "Authorization: Bearer <token>" \
>	-d appId=PXabc123 \
>	-d appId=PXdef456 \
>	-d tld=domain1.com \
>	-d tld=domain2.com \
>	-d excludedStatuses=authorized \
>	-d excludedStatuses=in_progress \
>	-d from=1674313200000 \
>	-d to=1674313200000 \
>	-d skip=40 \
>	-d take=10 \
>	-d include=cookies \
>	-d include=domains

1	{
2	"paging": {
3	"previous": "",
4	"current": "https://localhost:80/v1/pci/inventory/scripts?appId=PXabcd1234&tld=humansecurity.com&take=1&skip=0",
5	"next": "https://localhost:80/v1/pci/inventory/scripts?appId=PXabcd1234&tld=humansecurity.com&take=1&skip=1",
6	"count": 31
7	},
8	"data": [
9	{
10	"key": "aaa111bbb222ccc333ddd444",
11	"script_url": "cdn.mxpnl.com/libs/mixpanel-2-latest.min.js",
12	"app_id": "PXabcd1234",
13	"host_domain": "humansecurity.com",
14	"type": "third_party",
15	"vendor": "MixPanel",
16	"first_seen": "2023-10-19T00:00:00Z",
17	"last_seen": "2024-08-29T06:00:12Z",
18	"risk": {
19	"level": "high",
20	"reason": "Credit card access is being made by a third party script"
21	},
22	"page_types": [
23	"string"
24	],
25	"status": "unreviewed",
26	"status_category": "unreviewed",
27	"justification": "string",
28	"pages": [
29	"string"
30	]
31	}
32	]
33	}