Akamai: Application Security API

API version: v1

Auth

No authentication required.

Base URL

https://{hostname}/appsec/v1

Setup

1. No auth setup needed
2. GET /api-discovery -- verify access
3. POST /activations -- create first activations

Endpoints

236 endpoints across 10 groups. See references/api-spec.lap for full details.

activations

api-discovery

configs

contracts-groups

contracts

cves

export

hostname-coverage

onboardings

siem-definitions

Common Questions

Match user requests to endpoints in references/api-spec.lap. Key patterns:

• "Create a activation?" -> POST /activations
• "Get status details?" -> GET /activations/status/{statusId}
• "Get activation details?" -> GET /activations/{activationId}
• "Search api-discovery?" -> GET /api-discovery
• "Search basepath?" -> GET /api-discovery/host/{hostname}/basepath/{basePath}
• "Update a basepath?" -> PUT /api-discovery/host/{hostname}/basepath/{basePath}
• "Create a endpoint?" -> POST /api-discovery/host/{hostname}/basepath/{basePath}/endpoints
• "List all endpoints?" -> GET /api-discovery/host/{hostname}/basepath/{basePath}/endpoints
• "Create a config?" -> POST /configs
• "List all configs?" -> GET /configs
• "Get config details?" -> GET /configs/{configId}
• "Update a config?" -> PUT /configs/{configId}
• "Delete a config?" -> DELETE /configs/{configId}
• "List all activations?" -> GET /configs/{configId}/activations
• "Create a custom-rule?" -> POST /configs/{configId}/custom-rules
• "List all custom-rules?" -> GET /configs/{configId}/custom-rules
• "Get custom-rule details?" -> GET /configs/{configId}/custom-rules/{ruleId}
• "Update a custom-rule?" -> PUT /configs/{configId}/custom-rules/{ruleId}
• "Delete a custom-rule?" -> DELETE /configs/{configId}/custom-rules/{ruleId}
• "List all failover-hostnames?" -> GET /configs/{configId}/failover-hostnames
• "Get subscription details?" -> GET /configs/{configId}/notification/subscription/{feature}
• "Create a version?" -> POST /configs/{configId}/versions
• "List all versions?" -> GET /configs/{configId}/versions
• "Create a diff?" -> POST /configs/{configId}/versions/diff
• "Get version details?" -> GET /configs/{configId}/versions/{versionNumber}
• "Delete a version?" -> DELETE /configs/{configId}/versions/{versionNumber}
• "List all cookie-settings?" -> GET /configs/{configId}/versions/{versionNumber}/advanced-settings/cookie-settings
• "List all evasive-path-match?" -> GET /configs/{configId}/versions/{versionNumber}/advanced-settings/evasive-path-match
• "List all ja4-fingerprint?" -> GET /configs/{configId}/versions/{versionNumber}/advanced-settings/ja4-fingerprint
• "List all logging?" -> GET /configs/{configId}/versions/{versionNumber}/advanced-settings/logging
• "List all attack-payload?" -> GET /configs/{configId}/versions/{versionNumber}/advanced-settings/logging/attack-payload
• "List all pii-learning?" -> GET /configs/{configId}/versions/{versionNumber}/advanced-settings/pii-learning
• "List all pragma-header?" -> GET /configs/{configId}/versions/{versionNumber}/advanced-settings/pragma-header
• "List all prefetch?" -> GET /configs/{configId}/versions/{versionNumber}/advanced-settings/prefetch
• "List all request-body?" -> GET /configs/{configId}/versions/{versionNumber}/advanced-settings/request-body
• "Create a behavioral-ddo?" -> POST /configs/{configId}/versions/{versionNumber}/behavioral-ddos
• "List all behavioral-ddos?" -> GET /configs/{configId}/versions/{versionNumber}/behavioral-ddos
• "Get behavioral-ddo details?" -> GET /configs/{configId}/versions/{versionNumber}/behavioral-ddos/{profileId}
• "Update a behavioral-ddo?" -> PUT /configs/{configId}/versions/{versionNumber}/behavioral-ddos/{profileId}
• "Delete a behavioral-ddo?" -> DELETE /configs/{configId}/versions/{versionNumber}/behavioral-ddos/{profileId}
• "List all bypass-network-lists?" -> GET /configs/{configId}/versions/{versionNumber}/bypass-network-lists
• "Create a custom-deny?" -> POST /configs/{configId}/versions/{versionNumber}/custom-deny
• "Search custom-deny?" -> GET /configs/{configId}/versions/{versionNumber}/custom-deny
• "Get custom-deny details?" -> GET /configs/{configId}/versions/{versionNumber}/custom-deny/{customDenyId}
• "Update a custom-deny?" -> PUT /configs/{configId}/versions/{versionNumber}/custom-deny/{customDenyId}
• "Delete a custom-deny?" -> DELETE /configs/{configId}/versions/{versionNumber}/custom-deny/{customDenyId}
• "Create a usage?" -> POST /configs/{configId}/versions/{versionNumber}/custom-rules/usage
• "Create a export?" -> POST /configs/{configId}/versions/{versionNumber}/export
• "List all result?" -> GET /configs/{configId}/versions/{versionNumber}/export/{exportId}/result
• "List all status?" -> GET /configs/{configId}/versions/{versionNumber}/export/{exportId}/status
• "List all match-targets?" -> GET /configs/{configId}/versions/{versionNumber}/hostname-coverage/match-targets
• "List all overlapping?" -> GET /configs/{configId}/versions/{versionNumber}/hostname-coverage/overlapping
• "Create a malware-policy?" -> POST /configs/{configId}/versions/{versionNumber}/malware-policies
• "List all malware-policies?" -> GET /configs/{configId}/versions/{versionNumber}/malware-policies
• "List all content-types?" -> GET /configs/{configId}/versions/{versionNumber}/malware-policies/content-types
• "Get malware-policy details?" -> GET /configs/{configId}/versions/{versionNumber}/malware-policies/{malwarePolicyId}
• "Update a malware-policy?" -> PUT /configs/{configId}/versions/{versionNumber}/malware-policies/{malwarePolicyId}
• "Delete a malware-policy?" -> DELETE /configs/{configId}/versions/{versionNumber}/malware-policies/{malwarePolicyId}
• "Create a match-target?" -> POST /configs/{configId}/versions/{versionNumber}/match-targets
• "List all match-targets?" -> GET /configs/{configId}/versions/{versionNumber}/match-targets
• "Get match-target details?" -> GET /configs/{configId}/versions/{versionNumber}/match-targets/{targetId}
• "Update a match-target?" -> PUT /configs/{configId}/versions/{versionNumber}/match-targets/{targetId}
• "Delete a match-target?" -> DELETE /configs/{configId}/versions/{versionNumber}/match-targets/{targetId}
• "Create a rate-policy?" -> POST /configs/{configId}/versions/{versionNumber}/rate-policies
• "List all rate-policies?" -> GET /configs/{configId}/versions/{versionNumber}/rate-policies
• "Get rate-policy details?" -> GET /configs/{configId}/versions/{versionNumber}/rate-policies/{ratePolicyId}
• "Update a rate-policy?" -> PUT /configs/{configId}/versions/{versionNumber}/rate-policies/{ratePolicyId}
• "Delete a rate-policy?" -> DELETE /configs/{configId}/versions/{versionNumber}/rate-policies/{ratePolicyId}
• "Create a reputation-profile?" -> POST /configs/{configId}/versions/{versionNumber}/reputation-profiles
• "List all reputation-profiles?" -> GET /configs/{configId}/versions/{versionNumber}/reputation-profiles
• "Get reputation-profile details?" -> GET /configs/{configId}/versions/{versionNumber}/reputation-profiles/{reputationProfileId}
• "Update a reputation-profile?" -> PUT /configs/{configId}/versions/{versionNumber}/reputation-profiles/{reputationProfileId}
• "Delete a reputation-profile?" -> DELETE /configs/{configId}/versions/{versionNumber}/reputation-profiles/{reputationProfileId}
• "Create a challenge-action?" -> POST /configs/{configId}/versions/{versionNumber}/response-actions/challenge-actions
• "List all challenge-actions?" -> GET /configs/{configId}/versions/{versionNumber}/response-actions/challenge-actions
• "Get challenge-action details?" -> GET /configs/{configId}/versions/{versionNumber}/response-actions/challenge-actions/{actionId}
• "Update a challenge-action?" -> PUT /configs/{configId}/versions/{versionNumber}/response-actions/challenge-actions/{actionId}
• "Delete a challenge-action?" -> DELETE /configs/{configId}/versions/{versionNumber}/response-actions/challenge-actions/{actionId}
• "Create a security-policy?" -> POST /configs/{configId}/versions/{versionNumber}/security-policies
• "List all security-policies?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies
• "Get security-policy details?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}
• "Update a security-policy?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}
• "Delete a security-policy?" -> DELETE /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}
• "List all evasive-path-match?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/advanced-settings/evasive-path-match
• "List all logging?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/advanced-settings/logging
• "List all attack-payload?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/advanced-settings/logging/attack-payload
• "List all pragma-header?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/advanced-settings/pragma-header
• "List all request-body?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/advanced-settings/request-body
• "List all api-endpoints?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/api-endpoints
• "List all api-request-constraints?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/api-request-constraints
• "Update a api-request-constraint?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/api-request-constraints/{apiId}
• "List all attack-groups?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/attack-groups
• "Get attack-group details?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/attack-groups/{attackGroupId}
• "Update a attack-group?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/attack-groups/{attackGroupId}
• "List all condition-exception?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/attack-groups/{attackGroupId}/condition-exception
• "List all behavioral-ddos?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/behavioral-ddos
• "Update a behavioral-ddo?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/behavioral-ddos/{profileId}
• "List all bypass-network-lists?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/bypass-network-lists
• "List all cpc?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/cpc
• "List all custom-rules?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/custom-rules
• "Update a custom-rule?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/custom-rules/{ruleId}
• "Create a eval?" -> POST /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval
• "List all eval-groups?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval-groups
• "Get eval-group details?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval-groups/{attackGroupId}
• "Update a eval-group?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval-groups/{attackGroupId}
• "List all condition-exception?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval-groups/{attackGroupId}/condition-exception
• "List all eval-hostnames?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval-hostnames
• "List all eval-penalty-box?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval-penalty-box
• "List all conditions?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval-penalty-box/conditions
• "List all eval-rules?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval-rules
• "Get eval-rule details?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval-rules/{ruleId}
• "Update a eval-rule?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval-rules/{ruleId}
• "List all condition-exception?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/eval-rules/{ruleId}/condition-exception
• "List all ip-geo-firewall?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/ip-geo-firewall
• "List all malware-policies?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/malware-policies
• "Update a malware-policy?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/malware-policies/{malwarePolicyId}
• "List all mode?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/mode
• "List all penalty-box?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/penalty-box
• "List all conditions?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/penalty-box/conditions
• "List all protections?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/protections
• "List all rapid-rules?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rapid-rules
• "List all action?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rapid-rules/action
• "List all status?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rapid-rules/status
• "List all condition-exception?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rapid-rules/{ruleId}/condition-exception
• "List all lock?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rapid-rules/{ruleId}/lock
• "List all action?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rapid-rules/{ruleId}/versions/{ruleVersion}/action
• "List all rate-policies?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rate-policies
• "Update a rate-policy?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rate-policies/{ratePolicyId}
• "Create a recommendation?" -> POST /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/recommendations
• "List all recommendations?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/recommendations
• "Get attack-group details?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/recommendations/attack-groups/{attackGroupId}
• "Get rule details?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/recommendations/rules/{ruleId}
• "List all reputation-analysis?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/reputation-analysis
• "List all reputation-profiles?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/reputation-profiles
• "Get reputation-profile details?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/reputation-profiles/{reputationProfileId}
• "Update a reputation-profile?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/reputation-profiles/{reputationProfileId}
• "List all rules?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rules
• "List all upgrade-details?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rules/upgrade-details
• "Get rule details?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rules/{ruleId}
• "Update a rule?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rules/{ruleId}
• "List all condition-exception?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/rules/{ruleId}/condition-exception
• "List all selected-hostnames?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/selected-hostnames
• "List all slow-post?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/slow-post
• "List all threat-intel?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/threat-intel
• "List all url-protections?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/url-protections
• "Update a url-protection?" -> PUT /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/url-protections/{urlProtectionPolicyId}
• "List all ruleset?" -> GET /configs/{configId}/versions/{versionNumber}/security-policies/{policyId}/web-application-firewall/ruleset
• "List all selectable-hostnames?" -> GET /configs/{configId}/versions/{versionNumber}/selectable-hostnames
• "List all selected-hostnames?" -> GET /configs/{configId}/versions/{versionNumber}/selected-hostnames
• "List all eval-hostnames?" -> GET /configs/{configId}/versions/{versionNumber}/selected-hostnames/eval-hostnames
• "List all siem?" -> GET /configs/{configId}/versions/{versionNumber}/siem
• "Create a url-protection?" -> POST /configs/{configId}/versions/{versionNumber}/url-protections
• "List all url-protections?" -> GET /configs/{configId}/versions/{versionNumber}/url-protections
• "Get url-protection details?" -> GET /configs/{configId}/versions/{versionNumber}/url-protections/{urlProtectionPolicyId}
• "Update a url-protection?" -> PUT /configs/{configId}/versions/{versionNumber}/url-protections/{urlProtectionPolicyId}
• "Delete a url-protection?" -> DELETE /configs/{configId}/versions/{versionNumber}/url-protections/{urlProtectionPolicyId}
• "List all version-notes?" -> GET /configs/{configId}/versions/{versionNumber}/version-notes
• "List all contracts-groups?" -> GET /contracts-groups
• "List all selectable-hostnames?" -> GET /contracts/{contractId}/groups/{groupId}/selectable-hostnames
• "List all cves?" -> GET /cves
• "Create a subscribe?" -> POST /cves/subscribe
• "List all subscribed?" -> GET /cves/subscribed
• "Create a unsubscribe?" -> POST /cves/unsubscribe
• "Get cve details?" -> GET /cves/{cveId}
• "List all security-coverage?" -> GET /cves/{cveId}/security-coverage
• "Get version details?" -> GET /export/configs/{configId}/versions/{versionNumber}
• "List all hostname-coverage?" -> GET /hostname-coverage
• "Create a onboarding?" -> POST /onboardings
• "List all onboardings?" -> GET /onboardings
• "Get onboarding details?" -> GET /onboardings/{onboardingId}
• "Delete a onboarding?" -> DELETE /onboardings/{onboardingId}
• "Create a activation?" -> POST /onboardings/{onboardingId}/activations
• "Get activation details?" -> GET /onboardings/{onboardingId}/activations/{activationId}
• "List all certificate-validation?" -> GET /onboardings/{onboardingId}/certificate-validation
• "Create a validate?" -> POST /onboardings/{onboardingId}/certificate-validation/validate
• "List all cname-to-akamai?" -> GET /onboardings/{onboardingId}/cname-to-akamai
• "Create a validate?" -> POST /onboardings/{onboardingId}/cname-to-akamai/validate
• "List all domain-validation?" -> GET /onboardings/{onboardingId}/domain-validation
• "Create a validate?" -> POST /onboardings/{onboardingId}/domain-validation/validate
• "List all origin-validation?" -> GET /onboardings/{onboardingId}/origin-validation
• "Create a skip?" -> POST /onboardings/{onboardingId}/origin-validation/skip
• "Create a validate?" -> POST /onboardings/{onboardingId}/origin-validation/validate
• "List all settings?" -> GET /onboardings/{onboardingId}/settings
• "List all siem-definitions?" -> GET /siem-definitions

Response Tips

• Check response schemas in references/api-spec.lap for field details
• List endpoints may support pagination; check for limit, offset, or cursor params
• Create/update endpoints typically return the created/updated object
• Error responses use types: [Conflict](https, [Forbidden](https, [Invalid](https, [Unauthorized](https

CLI

# Update this spec to the latest version
npx @lap-platform/lapsh get akamai-application-security-api -o references/api-spec.lap

# Search for related APIs
npx @lap-platform/lapsh search akamai-application-security-api

References

• Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas

Generated from the official API spec by LAP