Centrify Rules API

The Rules API from Centrify — 5 operation(s) for rules.

Operations 5

GET /rules /rules #
POST /rules/webhook /rules/webhook #
POST /rules/webhook/test /rules/webhook/test #
DELETE /rules/{id} /rules/{id} #
POST /rules/{id}/status /rules/{id}/status #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/centrify:centrify-rules-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

centrify-rules-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: analytics Rules API
  version: '23.1'
servers:
- url: https://example.com/analytics/services/v1.0
security:
- {}
tags:
- name: Rules
paths:
  /rules:
    get:
      summary: /rules
      description: Gets a list of webhooks on the tenant.
      operationId: rules
      responses:
        '200':
          description: '200'
          content:
            application/json:
              examples:
                Result:
                  value: "[  \n   {  \n      \"tenant_id\":\"ABC1234\",\n      \"policy_id\":\"7bb7...\",\n      \"name\":\"My Slack Test WebHook\",\n      \"description\":null,\n      \"rule\":{  \n         \"filter_type\":\"com.centrify.platform.notification.rule.filter.EventTypeFilter\",\n         \"filter_meta_data\":{  \n            \"event_type\":\"Analytics.Server.AdaptiveSessionRecording\"\n         }\n      },\n      \"actions\":[  \n         {  \n            \"action_type\":\"webhook\",\n            \"action_meta_data\":{  \n               \"headers\":\"\",\n               \"method\":\"POST\",\n               \"content_type\":\"application/json\",\n               \"request_body\":\"{\\n  \\\"attachments\\\": [\\n    {\\n      \\\"auth...\",\n               \"url\":\"https://hooks.slack.com/services/REDACTED...\"\n            },\n            \"action_provider\":null,\n            \"provider_meta_data\":{  \n\n            }\n         }\n      ],\n      \"status\":0,\n      \"created_by\":\"demo013\",\n      \"updated_by\":\"demo013\",\n      \"created_timestamp\":1526662928102,\n      \"updated_timestamp\":1526662928102,\n      \"new\":false,\n      \"id\":[  \n         \"AAA0004\",\n         \"7bb...c\"\n      ]\n   },\n   ...\n]"
        '400':
          description: '400'
          content:
            application/json:
              examples:
                Result:
                  value: '{}'
              schema:
                type: object
                properties: {}
      deprecated: false
      x-readme:
        code-samples:
        - language: http
          code: GET https://mytenant.centrify.io/analytics/services/v1.0/rules
        samples-languages:
        - http
      tags:
      - Rules
  /rules/webhook:
    post:
      summary: /rules/webhook
      description: Creates a webhook.
      operationId: ruleswebhook
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                content_type:
                  type: string
                  description: Specifies the type of content in the `request_body` parameter.
                description:
                  type: string
                  description: A description of the webhook.
                enabled:
                  type: boolean
                  description: Specifies if the webhook should be enabled or disabled upon creation.
                event_type:
                  type: string
                  description: Specifies the type of Centrify event that will cause the web hook to be invoked. Can be set to "Analytics.Server.AdaptiveSessionRecording" or "SecurityAlert".
                headers:
                  type: string
                  description: Specifies any header information required to invoke the webhook.
                method:
                  type: string
                  description: Specifies the REST verb to use when invoking the webhook (e.g. POST).
                name:
                  type: string
                  description: The name of the webhook.
                request_body:
                  type: string
                  description: The body of the request to send in the webhook.
                risk_level:
                  type: string
                  description: Specifies the risk level to send in the webhook.
                URL:
                  type: string
                  description: The URL of the webhook to invoke.
      responses:
        '204':
          description: '204'
          content:
            application/json:
              examples:
                Result:
                  value: 'HTTP/1.1 204 No Content

                    Server: Apache-Coyote/1.1

                    Date: Fri, 18 May 2018 17:02:08 GMT

                    Cache-Control: no-cache, no-store, max-age=0, must-revalidate

                    Pragma: no-cache

                    Expires: 0

                    Strict-Transport-Security: max-age=31536000 ; includeSubDomains

                    X-XSS-Protection: 1; mode=block

                    X-Frame-Options: DENY

                    X-Content-Type-Options: nosniff


                    '
        '400':
          description: '400'
          content:
            application/json:
              examples:
                Result:
                  value: '{}'
              schema:
                type: object
                properties: {}
      deprecated: false
      x-readme:
        code-samples:
        - language: http
          code: "POST https://mytenant.centrify.io/analytics/services/v1.0/rules/webhook HTTP/1.1\n\n{  \n   \"name\":\"My Slack WebHook\",\n   \"description\":\"\",\n   \"url\":\"https://hooks.slack.com/services/REDACTED.../B9...\",\n   \"method\":\"POST\",\n   \"content_type\":\"application/json\",\n   \"headers\":\"\",\n   \"request_body\":\"{\\n  \\\"attachments\\\": [\\n    {\\n      \\\"author_name\\\": \\\"Centrify Analytics\\\",\\n      \\\"author_link\\\": \\\"https://${tenant_id}-${system.podscape}.${system.domain}/analytics\\\",\\n      \\\"author_icon\\\": \\\"https://${tenant_id}-${system.podscape}.${system.domain}/analytics/ui/favicons/favicon.png\\\",\\n      \\\"title\\\": \\\"Anomaly Session Found from Centrify Analytics\\...\",\n   \"enabled\":true,\n   \"event_type\":\"Analytics.Server.AdaptiveSessionRecording\",\n   \"risk_level\":\"Low\"\n}"
        samples-languages:
        - http
      tags:
      - Rules
  /rules/webhook/test:
    post:
      summary: /rules/webhook/test
      description: Tests the connection for a webhook.
      operationId: ruleswebhooktest
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                content_type:
                  type: string
                  description: Specifies the type of content in the `request_body` parameter.
                description:
                  type: string
                  description: A description of the webhook.
                enabled:
                  type: string
                  description: Specifies if the webhook should be enabled or disabled upon creation.
                event_type:
                  type: string
                  description: Specifies the type of Centrify event that will cause the webhook to be invoked. Can be set to "Analytics.Server.AdaptiveSessionRecording" or  "SecurityAlert".
                headers:
                  type: string
                  description: Specifies any header information required to invoke the webhook.
                method:
                  type: string
                  description: Specifies the REST verb to use when invoking the webhook (e.g. POST).
                name:
                  type: string
                  description: The name of the webhook.
                request_body:
                  type: string
                  description: The body of the request to send in the webhook.
                risk_level:
                  type: string
                  description: Specifies the risk level to send in the webhook.
                URL:
                  type: string
                  description: The URL of the webhook to invoke.
      responses:
        '200':
          description: '200'
          content:
            application/json:
              examples:
                Result:
                  value: "{  \n   \"result\":true,\n   \"http_status\":200,\n   \"message\":\"ok\"\n}"
              schema:
                type: object
                properties:
                  result:
                    type: boolean
                    example: true
                    default: true
                  http_status:
                    type: integer
                    example: 200
                    default: 0
                  message:
                    type: string
                    example: ok
        '400':
          description: '400'
          content:
            application/json:
              examples:
                Result:
                  value: '{}'
              schema:
                type: object
                properties: {}
      deprecated: false
      x-readme:
        code-samples:
        - language: http
          code: "POST https://mytenant.centrify.io/analytics/services/v1.0/rules/webhook/test\n\n{  \n   \"name\":\"My Slack WebHook\",\n   \"description\":\"\",\n   \"url\":\"https://hooks.slack.com/services/REDACTED...\",\n   \"method\":\"POST\",\n   \"content_type\":\"application/json\",\n   \"headers\":\"\",\n   \"request_body\":\"{\\n  \\\"attachments\\\": [\\n    {\\n      \\\"autho...\",\n   \"enabled\":true,\n   \"event_type\":\"Analytics.Server.AdaptiveSessionRecording\",\n   \"risk_level\":\"Low\"\n}"
        samples-languages:
        - http
      tags:
      - Rules
  /rules/{id}:
    delete:
      summary: /rules/{id}
      description: ''
      operationId: rulesid
      parameters:
      - name: id
        in: path
        description: The ID of the webhook to delete.
        schema:
          type: string
        required: true
      responses:
        '200':
          description: '200'
          content:
            text/plain:
              examples:
                Result:
                  value: 'HTTP/1.1 204 No Content

                    Server: Apache-Coyote/1.1

                    Date: Fri, 18 May 2018 17:04:46 GMT

                    Cache-Control: no-cache, no-store, max-age=0, must-revalidate

                    Pragma: no-cache

                    Expires: 0

                    Strict-Transport-Security: max-age=31536000 ; includeSubDomains

                    X-XSS-Protection: 1; mode=block

                    X-Frame-Options: DENY

                    X-Content-Type-Options: nosniff

                    '
        '400':
          description: '400'
          content:
            application/json:
              examples:
                Result:
                  value: '{}'
              schema:
                type: object
                properties: {}
      deprecated: false
      x-readme:
        code-samples:
        - language: http
          code: DELETE https://mytenant.centrify.io/analytics/services/v1.0/rules/a5e...
        samples-languages:
        - http
      tags:
      - Rules
  /rules/{id}/status:
    post:
      summary: /rules/{id}/status
      description: Enables or disables a webhook,
      operationId: rulesidstatus
      parameters:
      - name: id
        in: path
        description: The ID of the webhook to enable or disable. You can get the IDs of each webhook on the tenant by invoking the [/rules](https://developer.delinea.com/reference/rules) endpoint.
        schema:
          type: string
        required: true
      responses:
        '200':
          description: '200'
          content:
            text/plain:
              examples:
                Result:
                  value: 'HTTP/1.1 204 No Content

                    Server: Apache-Coyote/1.1

                    Date: Fri, 18 May 2018 17:03:24 GMT

                    Cache-Control: no-cache, no-store, max-age=0, must-revalidate

                    Pragma: no-cache

                    Expires: 0

                    Strict-Transport-Security: max-age=31536000 ; includeSubDomains

                    X-XSS-Protection: 1; mode=block

                    X-Frame-Options: DENY

                    X-Content-Type-Options: nosniff'
        '400':
          description: '400'
          content:
            application/json:
              examples:
                Result:
                  value: '{}'
              schema:
                type: object
                properties: {}
      deprecated: false
      x-readme:
        code-samples:
        - language: http
          code: POST https://mytenant.centrify.io/analytics/services/v1.0/rules/7bb.../status HTTP/1.1
        samples-languages:
        - http
      tags:
      - Rules
x-readme-fauxas: true
x-provenance:
  method: searched
  source: https://developer.delinea.com/reference
  harvested: '2026-10-14'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://developer.delinea.com/reference/apisaccess_tokens-1.md
  - https://developer.delinea.com/reference/apisaccess_tokens.md
  - https://developer.delinea.com/reference/apisaccess_tokensid.md
  - https://developer.delinea.com/reference/apisaccess_tokensidactivate.md
  - https://developer.delinea.com/reference/apisaccess_tokensidinactivate.md
  - https://developer.delinea.com/reference/apisscopes.md
  - https://developer.delinea.com/reference/datasetsystemmodels.md
  - https://developer.delinea.com/reference/fileexportruleswebhookname.md
  - https://developer.delinea.com/reference/fileimportruleswebhook.md
  - https://developer.delinea.com/reference/rules.md
  - https://developer.delinea.com/reference/rulesid.md
  - https://developer.delinea.com/reference/rulesidstatus.md
  - https://developer.delinea.com/reference/ruleswebhook.md
  - https://developer.delinea.com/reference/ruleswebhooktest.md
  merge:
    pages: 14
    deduped: 0
    conflicts_kept_first: 0