Skip to content
Sencai Logo Sencai Logo Sencai Docs

List waf-rules

GET
/waf-rules

Web Application Firewall rule definitions scoped to an organisation. Rules are synced to supported providers (AWS WAFv2, Azure Front Door WAF, Cloudflare) on demand.

Authorizations

Section titled “Authorizations ”

Parameters

Section titled “ Parameters ”

Query Parameters

Section titled “Query Parameters ”
pagination[page]
integer
pagination[pageSize]
integer
filters

Strapi REST filter syntax

object
sort
string
populate
string

Responses

Section titled “ Responses ”

200

Section titled “200 ”

OK

object
data
Array
object
name
required
string
description
string
rule_type
string
Allowed values: rate_limit ip_block geo_block header_check sql_injection xss_protection custom
rule_config
required

Provider-agnostic rule configuration. Shape depends on rule_type: rate_limit={requests_per_minute,action}, ip_block={ip_addresses[]}, geo_block={countries[],action}, header_check={header,required,pattern}.

provider
string
Allowed values: aws azure gcp cloudflare manual
provider_rule_id

Provider-side rule/resource identifier returned after sync.

string
enabled
boolean
priority
integer
last_synced_at
string format: date-time
sync_status
string
Allowed values: pending synced error manual
organisation
One of:

DocumentId reference to api::organisation.organisation

string
documentId
string
id
integer
createdAt
string format: date-time
updatedAt
string format: date-time
publishedAt
string format: date-time
nullable
meta
object
pagination
object
page
integer
pageSize
integer
pageCount
integer
total
integer

401

Section titled “401 ”

Missing or invalid authentication

403

Section titled “403 ”

Not authorized (tenant scope or capability)