Export the script inventory
Downloads the whole inventory as CSV, with the same filters as the list endpoint and no pagination. Suitable as evidence for an assessor.
Requires the viewer role on the website and the compliance plan feature.
AuthorizationBearer <JWT>An OpenID Connect access token from signing in to CentralCSP, acting as the signed-in user.
workspaceId*stringThe workspace's id.
websiteId*stringThe website's id.
status?InventoryStatusunreviewed means nobody has looked at it yet. justified means it is authorized at its current hash. needs_review means it was justified but its contents have since changed. unauthorized means a person or a reject rule decided it does not belong on a payment page. excluded means an exclude rule took it out of PCI scope, for example a script a browser extension injects.
"unreviewed""justified""needs_review""unauthorized""excluded"requiresAction?booleantrue returns only scripts still waiting for a decision.
search?stringMatch part of the script URL.
length <= 255originId?stringOnly scripts served by this origin.
length <= 36tagIds?stringComma-separated tag identifiers. A script matches if it carries any of them.
length <= 2048includeRetired?booleanAlso return scripts that have left the PCI scope. Defaults to false.
A UTF-8 CSV file of the filtered inventory.
response?stringtext/csvcurl -X GET 'https://api.centralcsp.com/v1/workspaces/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/websites/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/compliance/scripts/export'"string"