CentralCSP
APICompliance

Export the compliance evidence pack

Downloads a ZIP evidence pack for PCI DSS v4.0.1 requirements 6.4.3 and 11.6.1, ready to hand to your assessor. It contains a PDF report (scope, methodology, the script inventory with each justification and approver, rejected and retired scripts, rules, origins, and a change summary) and two CSV files: the full script inventory and the full history of every script.

Requires the viewer role on the website and the compliance plan feature.

GET
/v1/workspaces/{workspaceId}/websites/{websiteId}/compliance/export

Authorization

headerAuthorizationBearer <JWT>

An OpenID Connect access token from signing in to CentralCSP, acting as the signed-in user.

Path Parameters

workspaceId*string

The workspace's id.

websiteId*string

The website's id.

Response Body

The ZIP evidence pack.

application/zip
  1. response
[key: string]?any
Example Request
curl -X GET 'https://api.centralcsp.com/v1/workspaces/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/websites/01936b7a-6f2e-7c31-9a4d-2f8e1c5b7d90/compliance/export'
Example Response
{}

Get the website compliance summary GET

Returns PCI DSS 6.4.3 readiness for one website: its payment pages and rules, how many scripts are in the inventory, and how many have been reviewed.

Reconcile the script inventory POST

Refreshes the website's script inventory from the latest reports: new scripts on payment pages, their origins, and matching rules.