---
title: List detected scripts
---
[Skip to content](#_top)
[API Reference](https://developers.cloudflare.com/api)
[Page Shield](https://developers.cloudflare.com/api/resources/page_shield)
[Scripts](https://developers.cloudflare.com/api/resources/page_shield/subresources/scripts)
Copy Markdown
Open in **Claude**Open in **ChatGPT**Open in **Cursor**
---
**Copy Markdown****View as Markdown**
# List detected scripts
GET/zones/{zone\_id}/page\_shield/scripts
Lists scripts detected on webpages in the zone, with filtering and pagination.
##### Security
API Token
The preferred authorization scheme for interacting with the Cloudflare API. Create a token.
**Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key
The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.
**Example:**X-Auth-Email: user@example.com
The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.
**Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required)
`Page Shield``Domain Page Shield Read``Domain Page Shield``Page Shield Read``Zone Settings Write``Zone Settings Read`
##### P ath ParametersExpand Collapse
zone\_id: string
Identifier
maxLength32
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20zone_id%20%3E%20(schema)>)
##### Q uery ParametersExpand Collapse
direction: optional "asc"or "desc"
The direction used to sort returned scripts.
One of the following:
"asc"
Link to this property
"desc"
Link to this property
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20direction%20%3E%20(schema)>)
exclude\_cdn\_cgi: optional boolean
When true, excludes scripts seen in a `/cdn-cgi` path from the returned scripts. The default value is true.
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20exclude_cdn_cgi%20%3E%20(schema)>)
exclude\_duplicates: optional boolean
When true, excludes duplicate scripts. We consider a script duplicate of another if their javascript content matches and they share the same url host and zone hostname. In such case, we return the most recent script for the URL host and zone hostname combination.
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20exclude_duplicates%20%3E%20(schema)>)
exclude\_urls: optional string
Excludes scripts whose URL contains one of the URL-encoded URLs separated by commas.
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20exclude_urls%20%3E%20(schema)>)
export: optional "csv"
Export the list of scripts as a file, limited to 50000 entries.
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20export%20%3E%20(schema)>)
hosts: optional string
Includes scripts that match one or more URL-encoded hostnames separated by commas.
Wildcards are supported at the start and end of each hostname to support starts with, ends with and contains. If no wildcards are used, results will be filtered by exact match
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20hosts%20%3E%20(schema)>)
order\_by: optional "first\_seen\_at"or "last\_seen\_at"
The field used to sort returned scripts.
One of the following:
"first\_seen\_at"
Link to this property
"last\_seen\_at"
Link to this property
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20order_by%20%3E%20(schema)>)
page: optional string
The current page number of the paginated results.
We additionally support a special value “all”. When “all” is used, the API will return all the scripts with the applied filters in a single page. This feature is best-effort and it may only work for zones with a low number of scripts
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20page%20%3E%20(schema)>)
page\_url: optional string
Includes scripts that match one or more page URLs (separated by commas) where they were last seen
Wildcards are supported at the start and end of each page URL to support starts with, ends with and contains. If no wildcards are used, results will be filtered by exact match
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20page_url%20%3E%20(schema)>)
per\_page: optional number
The number of results per page.
maximum100
minimum1
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20per_page%20%3E%20(schema)>)
prioritize\_malicious: optional boolean
When true, malicious scripts appear first in the returned scripts.
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20prioritize_malicious%20%3E%20(schema)>)
status: optional string
Filters the returned scripts using a comma-separated list of scripts statuses. Accepted values: `active`, `infrequent`, and `inactive`. The default value is `active`.
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20status%20%3E%20(schema)>)
urls: optional string
Includes scripts whose URL contain one or more URL-encoded URLs separated by commas.
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(params)%20default%20%3E%20(param)%20urls%20%3E%20(schema)>)
##### ReturnsExpand Collapse
result: array of object {id, added\_at, first\_seen\_at, 18 more }
id: string
Identifier
maxLength32
Link to this property
added\_at: string
formatdate-time
Link to this property
first\_seen\_at: string
formatdate-time
Link to this property
host: string
Link to this property
last\_seen\_at: string
formatdate-time
Link to this property
url: string
Link to this property
url\_contains\_cdn\_cgi\_path: boolean
Link to this property
cryptomining\_score: optional number
The cryptomining score of the JavaScript content.
maximum99
minimum1
Link to this property
Deprecateddataflow\_score: optional number
The dataflow score of the JavaScript content. This field has been deprecated in favour of js\_integrity\_score.
maximum99
minimum1
Link to this property
domain\_reported\_malicious: optional boolean
Link to this property
fetched\_at: optional string
The timestamp of when the script was last fetched.
Link to this property
first\_page\_url: optional string
Link to this property
hash: optional string
The computed hash of the analyzed script.
maxLength64
minLength64
Link to this property
js\_integrity\_score: optional number
The integrity score of the JavaScript content.
maximum99
minimum1
Link to this property
magecart\_score: optional number
The magecart score of the JavaScript content.
maximum99
minimum1
Link to this property
malicious\_domain\_categories: optional array of string
Link to this property
malicious\_url\_categories: optional array of string
Link to this property
malware\_score: optional number
The malware score of the JavaScript content.
maximum99
minimum1
Link to this property
Deprecatedobfuscation\_score: optional number
The obfuscation score of the JavaScript content. This field has been deprecated in favour of js\_integrity\_score.
maximum99
minimum1
Link to this property
page\_urls: optional array of string
Link to this property
url\_reported\_malicious: optional boolean
Link to this property
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20result>)
result\_info: object {count, page, per\_page, 2 more }
count: number
Total number of results for the requested service
Link to this property
page: number
Current page within paginated list of results
Link to this property
per\_page: number
Number of results per page of results
Link to this property
total\_count: number
Total results available without any search parameters
Link to this property
total\_pages: number
Total number of pages
Link to this property
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20result_info>)
success: true
Whether the API call was successful
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20success>)
errors: optional array of ResponseInfo { code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20errors>)
messages: optional array of ResponseInfo { code, message, documentation\_url, source }
code: number
minimum1000
Link to this property
message: string
Link to this property
documentation\_url: optional string
Link to this property
source: optional object {pointer }
pointer: optional string
Link to this property
Link to this property
[Link to this property](<#(resource)%20page_shield.scripts%20%3E%20(method)%20list%20%3E%20(network%20schema)%20%3E%20(property)%20messages>)
### List detected scripts
HTTP
HTTPTypeScriptPythonGoTerraform
```
curl https://api.cloudflare.com/client/v4/zones/$ZONE_ID/page_shield/scripts \
-H "Authorization: Bearer $CLOUDFLARE_API_TOKEN"
```
200 example
```
{
"result": [
{
"id": "023e105f4ecef8ad9ca31a8372d0c353",
"added_at": "2021-08-18T10:51:10.09615Z",
"first_seen_at": "2021-08-18T10:51:08Z",
"host": "blog.cloudflare.com",
"last_seen_at": "2021-09-02T09:57:54Z",
"url": "https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.min.js",
"url_contains_cdn_cgi_path": false,
"cryptomining_score": 1,
"dataflow_score": 1,
"domain_reported_malicious": false,
"fetched_at": "fetched_at",
"first_page_url": "blog.cloudflare.com/page",
"hash": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"js_integrity_score": 1,
"magecart_score": 1,
"malicious_domain_categories": [
"Malware"
],
"malicious_url_categories": [
"Malware"
],
"malware_score": 1,
"obfuscation_score": 1,
"page_urls": [
"blog.cloudflare.com/page1",
"blog.cloudflare.com/page2"
],
"url_reported_malicious": false
}
],
"result_info": {
"count": 1,
"page": 1,
"per_page": 20,
"total_count": 2000,
"total_pages": 100
},
"success": true,
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
]
}
```
##### Returns Examples
200 example
```
{
"result": [
{
"id": "023e105f4ecef8ad9ca31a8372d0c353",
"added_at": "2021-08-18T10:51:10.09615Z",
"first_seen_at": "2021-08-18T10:51:08Z",
"host": "blog.cloudflare.com",
"last_seen_at": "2021-09-02T09:57:54Z",
"url": "https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.6.0/js/bootstrap.min.js",
"url_contains_cdn_cgi_path": false,
"cryptomining_score": 1,
"dataflow_score": 1,
"domain_reported_malicious": false,
"fetched_at": "fetched_at",
"first_page_url": "blog.cloudflare.com/page",
"hash": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"js_integrity_score": 1,
"magecart_score": 1,
"malicious_domain_categories": [
"Malware"
],
"malicious_url_categories": [
"Malware"
],
"malware_score": 1,
"obfuscation_score": 1,
"page_urls": [
"blog.cloudflare.com/page1",
"blog.cloudflare.com/page2"
],
"url_reported_malicious": false
}
],
"result_info": {
"count": 1,
"page": 1,
"per_page": 20,
"total_count": 2000,
"total_pages": 100
},
"success": true,
"errors": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
],
"messages": [
{
"code": 1000,
"message": "message",
"documentation_url": "documentation_url",
"source": {
"pointer": "pointer"
}
}
]
}
```