CentralCSP
APIInventory Scripts

Export the script inventory

Streams the whole inventory as CSV, with the same filters as the list endpoint and no pagination. Suitable as evidence for an assessor.

Requires the viewer role on the website and the compliance plan feature.

GET
/v1/workspaces/{workspaceId}/websites/{websiteId}/compliance/scripts/export

Authorization

AuthorizationBearer <token>

An OpenID Connect access token issued by Keycloak, acting as the signed-in user.

In: header

Path Parameters

workspaceId*string
websiteId*string

Query Parameters

status?|||

unreviewed means nobody has looked at it yet. justified means it is authorized at its current hash. needs_review means it was justified but its contents have since changed. unauthorized means it was judged not to belong on a payment page.

requiresAction?boolean

true returns only scripts still waiting for a decision, which is the review queue.

search?string

Match part of the script URL.

Lengthlength <= 255
originId?string

Only scripts served by this origin.

Lengthlength <= 36
tagIds?string

Comma-separated tag identifiers. A script matches if it carries any of them.

Lengthlength <= 2048
includeRetired?boolean

Also return scripts that have left the PCI scope. Off by default, so the list describes the live inventory.

Response Body

text/csv

curl -X GET "https://api-next.centralcsp.com/v1/workspaces/string/websites/string/compliance/scripts/export"
"string"