Censys · Schema

NameConstraints

NameConstraints schema from Asset Graph API

SecurityInternet IntelligenceAttack Surface ManagementThreat Huntingcyber-threat-intelligenceOSINTInternet ScanningCertificatesAsset Discovery

Properties

Name Type Description
critical boolean
excluded_directory_names arraynull A record providing excluded names of the type directoryName in leaf certificates whose trust path includes this certificate.
excluded_edi_party_names arraynull A record providing excluded names of the type ediPartyName in leaf certificates whose trust path includes this certificate.
excluded_email_addresses arraynull A record providing a range of excluded names of the type rfc822Name in leaf certificates whose trust path includes this certificate.
excluded_ip_addresses arraynull A record providing a range of excluded names of the type iPAddress in leaf certificates whose trust path includes this certificate.
excluded_names arraynull A record providing a range of excluded names of the type dNSName in leaf certificates whose trust path includes this certificate.
excluded_registered_ids arraynull A record providing excluded names of the type registeredID in leaf certificates whose trust path includes this certificate.
excluded_uris arraynull A record providing a range of excluded uniform resource identifiers in leaf certificates whose trust path includes this certificate.
permitted_directory_names arraynull A record providing permitted names of the type directoryName in leaf certificates whose trust path includes this certificate.
permitted_edi_party_names arraynull A record providing permitted names of the type ediPartyName in leaf certificates whose trust path includes this certificate.
permitted_email_addresses arraynull A record providing a range of permitted names of the type rfc822Name in leaf certificates whose trust path includes this certificate.
permitted_ip_addresses arraynull A record providing a range of permitted names of the type iPAddress in leaf certificates whose trust path includes this certificate.
permitted_names arraynull A record providing a range of permitted names of the type dNSName in leaf certificates whose trust path includes this certificate.
permitted_registered_ids arraynull A record providing permitted names of the type registeredID in leaf certificates whose trust path includes this certificate.
permitted_uris arraynull A record providing a range of permitted uniform resource identifiers in leaf certificates whose trust path includes this certificate.
View JSON Schema on GitHub

JSON Schema

asset-graph-nameconstraints-schema.json Raw ↑ 
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/censys/refs/heads/main/json-schema/asset-graph-nameconstraints-schema.json",
  "title": "NameConstraints",
  "description": "NameConstraints schema from Asset Graph API",
  "type": "object",
  "properties": {
    "critical": {
      "type": "boolean"
    },
    "excluded_directory_names": {
      "description": "A record providing excluded names of the type directoryName in leaf certificates whose trust path includes this certificate.",
      "items": {
        "$ref": "#/components/schemas/DistinguishedName"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "excluded_edi_party_names": {
      "description": "A record providing excluded names of the type ediPartyName in leaf certificates whose trust path includes this certificate.",
      "items": {
        "$ref": "#/components/schemas/EdiPartyName"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "excluded_email_addresses": {
      "description": "A record providing a range of excluded names of the type rfc822Name in leaf certificates whose trust path includes this certificate.",
      "items": {
        "type": "string"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "excluded_ip_addresses": {
      "description": "A record providing a range of excluded names of the type iPAddress in leaf certificates whose trust path includes this certificate.",
      "items": {
        "$ref": "#/components/schemas/GeneralSubtreeIp"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "excluded_names": {
      "description": "A record providing a range of excluded names of the type dNSName in leaf certificates whose trust path includes this certificate.",
      "items": {
        "type": "string"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "excluded_registered_ids": {
      "description": "A record providing excluded names of the type registeredID in leaf certificates whose trust path includes this certificate.",
      "items": {
        "type": "string"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "excluded_uris": {
      "description": "A record providing a range of excluded uniform resource identifiers in leaf certificates whose trust path includes this certificate.",
      "items": {
        "type": "string"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "permitted_directory_names": {
      "description": "A record providing permitted names of the type directoryName in leaf certificates whose trust path includes this certificate.",
      "items": {
        "$ref": "#/components/schemas/DistinguishedName"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "permitted_edi_party_names": {
      "description": "A record providing permitted names of the type ediPartyName in leaf certificates whose trust path includes this certificate.",
      "items": {
        "$ref": "#/components/schemas/EdiPartyName"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "permitted_email_addresses": {
      "description": "A record providing a range of permitted names of the type rfc822Name in leaf certificates whose trust path includes this certificate.",
      "items": {
        "type": "string"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "permitted_ip_addresses": {
      "description": "A record providing a range of permitted names of the type iPAddress in leaf certificates whose trust path includes this certificate.",
      "items": {
        "$ref": "#/components/schemas/GeneralSubtreeIp"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "permitted_names": {
      "description": "A record providing a range of permitted names of the type dNSName in leaf certificates whose trust path includes this certificate.",
      "items": {
        "type": "string"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "permitted_registered_ids": {
      "description": "A record providing permitted names of the type registeredID in leaf certificates whose trust path includes this certificate.",
      "items": {
        "type": "string"
      },
      "type": [
        "array",
        "null"
      ]
    },
    "permitted_uris": {
      "description": "A record providing a range of permitted uniform resource identifiers in leaf certificates whose trust path includes this certificate.",
      "items": {
        "type": "string"
      },
      "type": [
        "array",
        "null"
      ]
    }
  },
  "additionalProperties": false
}

Work with this as data

Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for schemas

4 MCP tools reach this
  • find_json_schemasBrowse and filter every JSON Schema in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This JSON Schema 
curl "https://apis.io/api/v1/json-schemas/asset-graph-nameconstraints"
All schemas 
curl "https://apis.io/api/v1/json-schemas?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.