Criteria

APIs for managing Criteria

Get all criteria

get

Retrieves a paginated list of all criteria.

Required license:

Cortex XSIAM Premium. In Cortex XSIAM Enterprise and Cortex NG SIEM, requires the Cortex Cloud Posture Management add-on. Not supported in XSIAM Enterprise Plus.

Query parameters

pagenumber · doubleOptional

Current page number in the paginated response.

pageSizenumber · doubleOptional

Total number of items in the current page.

Responses

200

Ok

application/json

currentPagenumber · doubleRequired

Current page number in the paginated response.

totalPagesnumber · doubleOptional

Total number of pages for the paginated response.

pageSizenumber · doubleRequired

Number of entries in each page.

totalItemsnumber · doubleRequired

Total number of items in the response.

get/public_api/appsec/v1/application/criteria/all

GET /public_api/appsec/v1/application/criteria/all HTTP/1.1
Host: api-yourfqdn
Accept: */*

200

Ok

{
  "items": [
    {
      "id": "text",
      "name": "text",
      "description": "text",
      "creationMethod": "manual",
      "createdBy": "text",
      "createdAt": "2026-01-01T00:00:00.000Z",
      "lastUpdated": "2026-01-01T00:00:00.000Z",
      "deletedAt": "2026-01-01T00:00:00.000Z",
      "metadata": {
        "applicationCount": 1,
        "assetCount": 1,
        "refreshStatus": "in_progress",
        "deletedFromUai": true
      },
      "type": "code",
      "config": {
        "unifyWithinProvider": true,
        "unifyAcrossProviders": true,
        "criteriaDefinitions": [
          [
            {
              "type": "tags",
              "provider": "GITLAB",
              "filters": [
                {
                  "type": "equal",
                  "field": "repositoryName",
                  "values": [
                    "text"
                  ]
                }
              ],
              "tagKeys": [
                "text"
              ]
            }
          ]
        ],
        "criteriaPrettyName": "text",
        "criteriaPrettyNameTags": [
          "text"
        ],
        "applicationMetaData": {
          "businessOwner": "none",
          "businessCriticality": "Critical",
          "exposedToInternetOverride": true
        }
      }
    }
  ],
  "currentPage": 1,
  "totalPages": 1,
  "pageSize": 1,
  "totalItems": 1
}

Get a Criteria by ID

get

Retrieves detailed information for a specific criteria using its unique Id.

Required license:

Cortex XSIAM Premium. In Cortex XSIAM Enterprise and Cortex NG SIEM, requires the Cortex Cloud Posture Management add-on. Not supported in XSIAM Enterprise Plus.

Path parameters

criteriaIdstringRequired

Unique identifier for the criteria

Header parameters

AuthorizationstringRequired

{api_key}

Example: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP

x-xdr-auth-idstringRequired

{api_key_id}

Example: 241

Responses

200

Ok

application/json

or

get/public_api/appsec/v1/application/criteria/{criteriaId}

GET /public_api/appsec/v1/application/criteria/{criteriaId} HTTP/1.1
Host: api-yourfqdn
Authorization: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP 
x-xdr-auth-id: 241
Accept: */*

200

Ok

{
  "id": "text",
  "name": "text",
  "description": "text",
  "creationMethod": "manual",
  "createdBy": "text",
  "createdAt": "2026-01-01T00:00:00.000Z",
  "lastUpdated": "2026-01-01T00:00:00.000Z",
  "deletedAt": "2026-01-01T00:00:00.000Z",
  "metadata": {
    "applicationCount": 1,
    "assetCount": 1,
    "refreshStatus": "in_progress",
    "deletedFromUai": true
  },
  "type": "code",
  "config": {
    "unifyWithinProvider": true,
    "unifyAcrossProviders": true,
    "criteriaDefinitions": [
      [
        {
          "type": "tags",
          "provider": "GITLAB",
          "filters": [
            {
              "type": "equal",
              "field": "repositoryName",
              "values": [
                "text"
              ]
            }
          ],
          "tagKeys": [
            "text"
          ]
        }
      ]
    ],
    "criteriaPrettyName": "text",
    "criteriaPrettyNameTags": [
      "text"
    ],
    "applicationMetaData": {
      "businessOwner": "none",
      "businessCriticality": "Critical",
      "exposedToInternetOverride": true
    }
  }
}

Delete a Criteria

delete

Deletes a specific criteria identified by its unique Id.

Required license:

Cortex XSIAM Premium. In Cortex XSIAM Enterprise and Cortex NG SIEM, requires the Cortex Cloud Posture Management add-on. Not supported in XSIAM Enterprise Plus.

Path parameters

criteriaIdstringRequired

Unique identifier for the criteria

Header parameters

AuthorizationstringRequired

{api_key}

Example: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP

x-xdr-auth-idstringRequired

{api_key_id}

Example: 241

Responses

204

No content

No content

delete/public_api/appsec/v1/application/criteria/{criteriaId}

DELETE /public_api/appsec/v1/application/criteria/{criteriaId} HTTP/1.1
Host: api-yourfqdn
Authorization: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP 
x-xdr-auth-id: 241
Accept: */*

204

No content

No content

Create a Criteria

post

Creates a Criteria based on the provided details.

Required license:

Cortex XSIAM Premium. In Cortex XSIAM Enterprise and Cortex NG SIEM, requires the Cortex Cloud Posture Management add-on. Not supported in XSIAM Enterprise Plus.

Header parameters

AuthorizationstringRequired

{api_key}

Example: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP

x-xdr-auth-idstringRequired

{api_key_id}

Example: 241

Body

Creates a new criteria object.

namestringRequired

Unique name for the criteria.

descriptionstringOptional

Optional description for the criteria.

typestring · enumRequired

Criteria Type. Allowed values - cloud.

Possible values:

configany ofRequired

or

Responses

200

Ok

application/json

idstringRequired

Unique Id of the criteria.

namestringRequired

Unique name of the criteria.

post/public_api/appsec/v1/application/criteria

POST /public_api/appsec/v1/application/criteria HTTP/1.1
Host: api-yourfqdn
Authorization: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP 
x-xdr-auth-id: 241
Content-Type: application/json
Accept: */*
Content-Length: 445

{
  "name": "text",
  "description": "text",
  "type": "cloud",
  "config": {
    "unifyWithinProvider": true,
    "unifyAcrossProviders": true,
    "criteriaDefinitions": [
      [
        {
          "type": "tags",
          "provider": "GITLAB",
          "filters": [
            {
              "type": "equal",
              "field": "repositoryName",
              "values": [
                "text"
              ]
            }
          ],
          "tagKeys": [
            "text"
          ]
        }
      ]
    ],
    "criteriaPrettyName": "text",
    "criteriaPrettyNameTags": [
      "text"
    ],
    "applicationMetaData": {
      "businessOwner": "none",
      "businessCriticality": "Critical",
      "exposedToInternetOverride": true
    }
  }
}

200

Ok

{
  "id": "text",
  "name": "text"
}