CentralCSP
APICompliance

Get the website compliance summary

Reports PCI DSS 6.4.3 readiness for one website: how much of its scope is defined, how many scripts are in the inventory, and how many of them have been decided on. reviewScope is the verdict to render: it tells a website with no scope to review apart from one whose scripts are all still waiting, so neither is presented as zero coverage.

Requires the viewer role on the website and the compliance plan feature.

GET
/v1/workspaces/{workspaceId}/websites/{websiteId}/compliance

Authorization

AuthorizationBearer <token>

An OpenID Connect access token issued by Keycloak, acting as the signed-in user.

In: header

Path Parameters

workspaceId*string
websiteId*string

Response Body

application/json

curl -X GET "https://example.com/v1/workspaces/string/websites/string/compliance"
{  "id": "string",  "name": "string",  "url": "http://example.com",  "endpointEnabled": true,  "paymentPages": 0,  "definedPaymentPages": 0,  "rules": 0,  "scripts": 0,  "justifiedScripts": 0,  "reviewedScripts": 0,  "scriptsToReview": 0,  "reviewScope": {    "state": "measured",    "percent": 75  }}