--- title: List detected scripts --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Page Shield](https://developers.cloudflare.com/api/go/resources/page_shield) [Scripts](https://developers.cloudflare.com/api/go/resources/page_shield/subresources/scripts) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # List detected scripts client.PageShield.Scripts.List(ctx, params) (\*SinglePage\[[ScriptListResponse]()], error) GET/zones/{zone\_id}/page\_shield/scripts Lists scripts detected on webpages in the zone, with filtering and pagination. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `Page Shield``Domain Page Shield Read``Domain Page Shield``Page Shield Read``Zone Settings Write``Zone Settings Read` ##### ParametersExpand Collapse
params ScriptListParams ZoneID param.Field\[string] Path param: Identifier maxLength32 Link to this property
Direction param.Field\[ScriptListParamsDirection]Optional Query param: The direction used to sort returned scripts. const ScriptListParamsDirectionAsc ScriptListParamsDirection = "asc" Link to this property const ScriptListParamsDirectionDesc ScriptListParamsDirection = "desc" Link to this property
Link to this property ExcludeCDNCGI param.Field\[bool]Optional Query param: When true, excludes scripts seen in a /cdn-cgi path from the returned scripts. The default value is true. Link to this property ExcludeDuplicates param.Field\[bool]Optional Query param: When true, excludes duplicate scripts. We consider a script duplicate of another if their javascript content matches and they share the same url host and zone hostname. In such case, we return the most recent script for the URL host and zone hostname combination. Link to this property ExcludeURLs param.Field\[string]Optional Query param: Excludes scripts whose URL contains one of the URL-encoded URLs separated by commas. Link to this property
Export param.Field\[ScriptListParamsExport]Optional Query param: Export the list of scripts as a file, limited to 50000 entries. const ScriptListParamsExportCsv ScriptListParamsExport = "csv" Link to this property
Link to this property Hosts param.Field\[string]Optional Query param: Includes scripts that match one or more URL-encoded hostnames separated by commas. Wildcards are supported at the start and end of each hostname to support starts with, ends with and contains. If no wildcards are used, results will be filtered by exact match Link to this property
OrderBy param.Field\[ScriptListParamsOrderBy]Optional Query param: The field used to sort returned scripts. const ScriptListParamsOrderByFirstSeenAt ScriptListParamsOrderBy = "first\_seen\_at" Link to this property const ScriptListParamsOrderByLastSeenAt ScriptListParamsOrderBy = "last\_seen\_at" Link to this property
Link to this property Page param.Field\[string]Optional Query param: The current page number of the paginated results. We additionally support a special value “all”. When “all” is used, the API will return all the scripts with the applied filters in a single page. This feature is best-effort and it may only work for zones with a low number of scripts Link to this property PageURL param.Field\[string]Optional Query param: Includes scripts that match one or more page URLs (separated by commas) where they were last seen Wildcards are supported at the start and end of each page URL to support starts with, ends with and contains. If no wildcards are used, results will be filtered by exact match Link to this property PerPage param.Field\[float64]Optional Query param: The number of results per page. maximum100 minimum1 Link to this property PrioritizeMalicious param.Field\[bool]Optional Query param: When true, malicious scripts appear first in the returned scripts. Link to this property Status param.Field\[string]Optional Query param: Filters the returned scripts using a comma-separated list of scripts statuses. Accepted values: active, infrequent, and inactive. The default value is active. Link to this property URLs param.Field\[string]Optional Query param: Includes scripts whose URL contain one or more URL-encoded URLs separated by commas. Link to this property
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse
type ScriptListResponse struct{…} ID string Identifier maxLength32 Link to this property AddedAt Time formatdate-time Link to this property FirstSeenAt Time formatdate-time Link to this property Host string Link to this property LastSeenAt Time formatdate-time Link to this property URL string Link to this property URLContainsCDNCGIPath bool Link to this property CryptominingScore int64Optional The cryptomining score of the JavaScript content. maximum99 minimum1 Link to this property DeprecatedDataflowScore int64Optional The dataflow score of the JavaScript content. This field has been deprecated in favour of js\_integrity\_score. maximum99 minimum1 Link to this property DomainReportedMalicious boolOptional Link to this property FetchedAt stringOptional The timestamp of when the script was last fetched. Link to this property FirstPageURL stringOptional Link to this property Hash stringOptional The computed hash of the analyzed script. maxLength64 minLength64 Link to this property JSIntegrityScore int64Optional The integrity score of the JavaScript content. maximum99 minimum1 Link to this property MagecartScore int64Optional The magecart score of the JavaScript content. maximum99 minimum1 Link to this property MaliciousDomainCategories \[]stringOptional Link to this property MaliciousURLCategories \[]stringOptional Link to this property MalwareScore int64Optional The malware score of the JavaScript content. maximum99 minimum1 Link to this property DeprecatedObfuscationScore int64Optional The obfuscation score of the JavaScript content. This field has been deprecated in favour of js\_integrity\_score. maximum99 minimum1 Link to this property PageURLs \[]stringOptional Link to this property URLReportedMalicious boolOptional Link to this property
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(model)%20ScriptListResponse%20%3E%20(schema)>) ### List detected scripts Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/option" "github.com/cloudflare/cloudflare-go/page_shield" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) page, err := client.PageShield.Scripts.List(context.TODO(), page_shield.ScriptListParams{ ZoneID: cloudflare.F("023e105f4ecef8ad9ca31a8372d0c353"), }) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", page) } ``` 200 example ``` { "result": [ { "id": "023e105f4ecef8ad9ca31a8372d0c353", "added_at": "2021-08-18T10:51:10.09615Z", "first_seen_at": "2021-08-18T10:51:08Z", "host": "blog.cloudflare.com", "last_seen_at": "2021-09-02T09:57:54Z", "url": "https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.min.js", "url_contains_cdn_cgi_path": false, "cryptomining_score": 1, "dataflow_score": 1, "domain_reported_malicious": false, "fetched_at": "fetched_at", "first_page_url": "blog.cloudflare.com/page", "hash": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx", "js_integrity_score": 1, "magecart_score": 1, "malicious_domain_categories": [ "Malware" ], "malicious_url_categories": [ "Malware" ], "malware_score": 1, "obfuscation_score": 1, "page_urls": [ "blog.cloudflare.com/page1", "blog.cloudflare.com/page2" ], "url_reported_malicious": false } ], "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 }, "success": true, "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ] } ``` ##### Returns Examples 200 example ``` { "result": [ { "id": "023e105f4ecef8ad9ca31a8372d0c353", "added_at": "2021-08-18T10:51:10.09615Z", "first_seen_at": "2021-08-18T10:51:08Z", "host": "blog.cloudflare.com", "last_seen_at": "2021-09-02T09:57:54Z", "url": "https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.min.js", "url_contains_cdn_cgi_path": false, "cryptomining_score": 1, "dataflow_score": 1, "domain_reported_malicious": false, "fetched_at": "fetched_at", "first_page_url": "blog.cloudflare.com/page", "hash": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx", "js_integrity_score": 1, "magecart_score": 1, "malicious_domain_categories": [ "Malware" ], "malicious_url_categories": [ "Malware" ], "malware_score": 1, "obfuscation_score": 1, "page_urls": [ "blog.cloudflare.com/page1", "blog.cloudflare.com/page2" ], "url_reported_malicious": false } ], "result_info": { "count": 1, "page": 1, "per_page": 20, "total_count": 2000, "total_pages": 100 }, "success": true, "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ] } ```