CentralCSP
APIInventory Origins

Update an inventory origin

Corrects an origin's classification or records what it is for, for example "payment provider, contractually approved". Useful when a CDN you own was classified third-party. Only the fields you send are changed.

Requires the manager role on the website and the compliance plan feature.

PATCH
/v1/workspaces/{workspaceId}/websites/{websiteId}/compliance/origins/{originId}

Authorization

AuthorizationBearer <token>

An OpenID Connect access token issued by Keycloak, acting as the signed-in user.

In: header

Path Parameters

workspaceId*string
websiteId*string
originId*string

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

description?|

Your note about this origin. Send null to clear it.

originType?|

Set automatically when the origin is first seen: first-party when it matches the website's own host, third-party otherwise. Correct it when a CDN you control was classified third-party.

Response Body

application/json

curl -X PATCH "https://api-next.centralcsp.com/v1/workspaces/string/websites/string/compliance/origins/string" \  -H "Content-Type: application/json" \  -d '{}'
{  "id": "string",  "workspaceId": "string",  "websiteId": "string",  "origin": "https://js.stripe.com",  "description": "string",  "originType": "first-party",  "tags": [    {      "id": "string",      "name": "string",      "color": "slate"    }  ],  "createdAt": "2019-08-24T14:15:22Z",  "updatedAt": "2019-08-24T14:15:22Z"}