Skip to main content
PUT
Update the team's threat protection policy
Full-document update of your organization’s threat protection policy. Unspecified fields reset to defaults. Team admins only.

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json
mode
enum<string>
required

Threat protection mode. off disables checks; normal checks URLs against Google Web Risk (+2 credits per URL scanned).

Available options:
off,
normal
Example:

"normal"

riskScoreThreshold
integer

Normalized score (0-100) at or above which a classifier verdict is blocked. Lower is stricter.

Required range: 0 <= x <= 100
Example:

75

blacklist
string[]

Exact domains or globs (e.g. *.example.com) always blocked, without a classifier call.

Example:
whitelist
string[]

Exact domains or globs always allowed. Wins over every other rule.

Example:
blockedTlds
string[]

Top-level domains to block outright, lowercase without a leading dot.

Example:
failurePolicy
enum<string>

Behavior when the classifier is unreachable: closed blocks (default), open allows.

Available options:
open,
closed
Example:

"closed"

allowRequestOverrides
boolean

Whether individual requests may pass a threatProtection object. When false, such requests are rejected with 403.

Example:

true

Response

Effective threat protection policy for the team's organization.

success
boolean
Example:

true

data
object