List alerts
Lists the alerts this website's rules raised, newest first. A pending alert is still collecting findings until its rule's cooldown lets it go out. All alert history is kept 90 days: an alert and its deliveries are deleted once they are older than that. An alert stores its first 10 findings, and findingsCount counts them all.
Requires the viewer role on the website and the alerting plan feature.
AuthorizationBearer <JWT>An OpenID Connect access token from signing in to CentralCSP, acting as the signed-in user.
workspaceId*stringThe workspace's id.
websiteId*stringThe website's id.
cursor?stringThe nextCursor of the previous page. Omit it to start from the beginning. A cursor encodes a position and is not meant to be built by hand.
limit*|How many items to return, from 1 to 200.
1 <= value <= 20050ruleId?stringOnly alerts raised by this rule.
eventType?AlertEventTypeWhat to notify about.
csp-violation:new-type: a new CSP directive and blocked origin pair appears in the reports.csp-hash:new-script-origin: a script loads from a new origin.network-error:new-failing-origin: a new origin starts failing network requests.coop:new-violation,coep:new-violation: a new COOP or COEP violation type appears.permissions-policy:new-violation: a new Permissions Policy violation appears.deprecation:new-api: a deprecated API is reported for the first time.intervention:new-type: a browser intervention is reported for the first time.connection-allowlist:new-blocked-origin: a new blocked connection origin appears.compliance:new-script: a script never seen before runs on a payment page and no reviewer or inventory rule has justified it yet.compliance:script-changed: a payment-page script serves different content and no reviewer or inventory rule has justified the new content yet.csp-violation:spike,integrity-violation:spike,network-error:spike,crash:spike: an hour's report count reaches at least 50 and 3 times the hourly average of the previous 24 hours. Both thresholds are adjustable withconfig.sbom:new-cve: a technology on the website gains a known vulnerability at or above the rule's minimum severity.sbom:version-status: a technology is detected with, or moves to, one of the rule'sstatuses.sbom:new-technology: the website starts loading a technology, or a version of one, it did not load before.
"csp-violation:new-type""csp-violation:spike""csp-hash:new-script-origin""integrity-violation:spike""compliance:new-script""compliance:script-changed""network-error:new-failing-origin""network-error:spike""crash:spike""coop:new-violation""coep:new-violation""permissions-policy:new-violation""deprecation:new-api""intervention:new-type""connection-allowlist:new-blocked-origin""sbom:new-cve""sbom:version-status""sbom:new-technology"status?AlertEventStatuspending is still collecting findings until the rule's cooldown lets it go out, dispatched was handed to the rule's channels.
"pending""dispatched"A page of alerts.
application/json- response
data*array<>The alerts on this page.
pagination*Where this page sits in the full result set.
curl -X GET 'https://api.centralcsp.com/v1/workspaces/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/websites/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/alerts/events?limit=50'{ "data": [ { "id": "string", "ruleId": "string", "ruleName": "New third-party script", "eventType": "csp-violation:new-type", "status": "pending", "findingsCount": 3, "windowStart": "2019-08-24T14:15:22Z", "windowEnd": "2019-08-24T14:15:22Z", "createdAt": "2019-08-24T14:15:22Z", "dispatchedAt": "2019-08-24T14:15:22Z" } ], "pagination": { "nextCursor": "string", "hasMore": true, "total": 0 }}