Criteria

APIs for managing Criteria

Get all criteria

get

Retrieves a paginated list of all criteria.

Required license:

Cortex Cloud Posture Management or Cortex Cloud Runtime Security with Application Security Add-on.

Query parameters

pagenumber · doubleOptional

Current page number in the paginated response.

pageSizenumber · doubleOptional

Total number of items in the current page.

Responses

200

Ok

application/json

currentPagenumber · doubleRequired

Current page number in the paginated response.

totalPagesnumber · doubleOptional

Total number of pages for the paginated response.

pageSizenumber · doubleRequired

Number of entries in each page.

totalItemsnumber · doubleRequired

Total number of items in the response.

get/public_api/appsec/v1/application/criteria/all

GET /public_api/appsec/v1/application/criteria/all HTTP/1.1
Host: api-yourfqdn
Accept: */*

200

Ok

{
  "items": [
    {
      "id": "text",
      "name": "text",
      "description": "text",
      "creationMethod": "manual",
      "createdBy": "text",
      "createdAt": "2026-01-01T00:00:00.000Z",
      "lastUpdated": "2026-01-01T00:00:00.000Z",
      "deletedAt": "2026-01-01T00:00:00.000Z",
      "metadata": {
        "applicationCount": 1,
        "assetCount": 1,
        "refreshStatus": "in_progress",
        "deletedFromUai": true
      },
      "type": "code",
      "config": {
        "unifyWithinProvider": true,
        "unifyAcrossProviders": true,
        "criteriaDefinitions": [
          {
            "type": "tags",
            "provider": "GITLAB",
            "tagKeys": [
              "text"
            ]
          }
        ],
        "criteriaPrettyName": "text",
        "criteriaPrettyNameTags": [
          "text"
        ],
        "applicationMetaData": {
          "businessOwner": "none",
          "businessCriticality": "Critical",
          "exposedToInternetOverride": true
        }
      }
    }
  ],
  "currentPage": 1,
  "totalPages": 1,
  "pageSize": 1,
  "totalItems": 1
}

Get a Criteria by ID

get

Retrieves detailed information for a specific criteria using its unique Id.

Required license:

Cortex Cloud Posture Management or Cortex Cloud Runtime Security with Application Security Add-on.

Path parameters

criteriaIdstringRequired

Unique identifier for the criteria

Header parameters

AuthorizationstringRequired

{api_key}

Example: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP

x-xdr-auth-idstringRequired

{api_key_id}

Example: 241

Responses

200

Ok

application/json

or

get/public_api/appsec/v1/application/criteria/{criteriaId}

GET /public_api/appsec/v1/application/criteria/{criteriaId} HTTP/1.1
Host: api-yourfqdn
Authorization: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP 
x-xdr-auth-id: 241
Accept: */*

200

Ok

{
  "id": "text",
  "name": "text",
  "description": "text",
  "creationMethod": "manual",
  "createdBy": "text",
  "createdAt": "2026-01-01T00:00:00.000Z",
  "lastUpdated": "2026-01-01T00:00:00.000Z",
  "deletedAt": "2026-01-01T00:00:00.000Z",
  "metadata": {
    "applicationCount": 1,
    "assetCount": 1,
    "refreshStatus": "in_progress",
    "deletedFromUai": true
  },
  "type": "code",
  "config": {
    "unifyWithinProvider": true,
    "unifyAcrossProviders": true,
    "criteriaDefinitions": [
      {
        "type": "tags",
        "provider": "GITLAB",
        "tagKeys": [
          "text"
        ]
      }
    ],
    "criteriaPrettyName": "text",
    "criteriaPrettyNameTags": [
      "text"
    ],
    "applicationMetaData": {
      "businessOwner": "none",
      "businessCriticality": "Critical",
      "exposedToInternetOverride": true
    }
  }
}

Delete a Criteria

delete

Deletes a specific criteria identified by its unique Id.

Required license:

Cortex Cloud Posture Management or Cortex Cloud Runtime Security with Application Security Add-on.

Path parameters

criteriaIdstringRequired

Unique identifier for the criteria

Header parameters

AuthorizationstringRequired

{api_key}

Example: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP

x-xdr-auth-idstringRequired

{api_key_id}

Example: 241

Responses

204

No content

No content

delete/public_api/appsec/v1/application/criteria/{criteriaId}

DELETE /public_api/appsec/v1/application/criteria/{criteriaId} HTTP/1.1
Host: api-yourfqdn
Authorization: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP 
x-xdr-auth-id: 241
Accept: */*

204

No content

No content

Create a Criteria

post

Creates a Criteria based on the provided details.

Required license:

Cortex Cloud Posture Management or Cortex Cloud Runtime Security with Application Security Add-on.

Header parameters

AuthorizationstringRequired

{api_key}

Example: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP

x-xdr-auth-idstringRequired

{api_key_id}

Example: 241

Body

Creates a new criteria object.

namestringRequired

Unique name for the criteria.

descriptionstringOptional

Optional description for the criteria.

typestring · enumRequired

Criteria Type. Allowed values - cloud.

Possible values:

configany ofRequired

or

Responses

200

Ok

application/json

idstringRequired

Unique Id of the criteria.

namestringRequired

Unique name of the criteria.

post/public_api/appsec/v1/application/criteria

POST /public_api/appsec/v1/application/criteria HTTP/1.1
Host: api-yourfqdn
Authorization: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP 
x-xdr-auth-id: 241
Content-Type: application/json
Accept: */*
Content-Length: 371

{
  "name": "text",
  "description": "text",
  "type": "cloud",
  "config": {
    "unifyWithinProvider": true,
    "unifyAcrossProviders": true,
    "criteriaDefinitions": [
      {
        "type": "tags",
        "provider": "GITLAB",
        "tagKeys": [
          "text"
        ]
      }
    ],
    "criteriaPrettyName": "text",
    "criteriaPrettyNameTags": [
      "text"
    ],
    "applicationMetaData": {
      "businessOwner": "none",
      "businessCriticality": "Critical",
      "exposedToInternetOverride": true
    }
  }
}

200

Ok

{
  "id": "text",
  "name": "text"
}