API Reference
Getting Started
Core Concepts
Backend API — Guides
Frontend API — Guides
OAuth & OpenID Connect — Guides
Enterprise: SSO & SCIM — Guides
Webhooks — Guides
SDKs
Backend API (BAPI)
Frontend API (FAPI)
Dashboard API
Public API
SCIM
OIDC
Platform

Attack Protection

AdminUpdated Sep 11, 2026

Attack Protection

Backend API — secret key (Authorization: Bearer sk_…).

2 routes. Each row is one endpoint with its explanation, required scope, and whether it honours the Idempotency-Key header.

Method & path

Scope

Idem

Explanation

GET /v1/attack_protection

attack_protection:read

Read the instance's attack-protection settings: brute-force lockout, breached-password checking, IP allowlist and captcha status.

PATCH /v1/attack_protection

attack_protection:write

Toggle attack protections — the brute-force lockout and the breached-password (HIBP) check.

Was this page helpful?