---
title: "List endpoint exceptions"
method: GET
path: "/endpoint-protection/{ecosystem}/exceptions"
---

# List endpoint exceptions

`GET /endpoint-protection/{ecosystem}/exceptions`

## Request

- Base URL: `https://app.aikido.dev/api/public/v1`
- URL: `https://app.aikido.dev/api/public/v1/endpoint-protection/{ecosystem}/exceptions`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.aikido.io/api/oauth/token` scopes: `endpoint_protection:read`

Returns a list of all the endpoint protection exceptions

## Path parameters

- `ecosystem` 'npm' | 'pypi' | 'vscode' | 'open_vsx' | 'maven' | 'nuget' | 'chrome' | 'golang' | 'skills_sh', required

## Response `200`

A list of all the endpoint protection exceptions for an ecosystem

- object[]
  - `id` integer: The ID of the exception
  - `ecosystem` string: The ecosystem of the exception
  - `package_name` string: The name of the package
  - `status` 'allowed' | 'blocked': The status of the exception. 'allowed' means the package is allowed to be installed, 'blocked' means the package is blocked from being installed.
  - `permission_group_id` integer: The ID of the permission group related to the exception
  - `permission_group_name` string: The name of the permission group related to the exception
  - `bypass_default_minimum_allowed_age` boolean: Whether the exception bypasses the default minimum allowed age on installation. This is only applicable for allowed exceptions.

---

[API](https://skmtc.dev/aikido/apis/aikido-security-api-documentation.md) - [All operations](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/revisions/da8691338133?raw)