---
title: "Get threat lists"
method: GET
path: "/firewall/apps/{app_id}/ip-lists"
---

# Get threat lists

`GET /firewall/apps/{app_id}/ip-lists`

## Request

- Base URL: `https://app.aikido.dev/api/public/v1`
- URL: `https://app.aikido.dev/api/public/v1/firewall/apps/{app_id}/ip-lists`
- Auth: OAuth 2
  - Client credentials
  - Token URL: `https://app.aikido.io/api/oauth/token` scopes: `firewall:read`

Get the IP lists configuration for an app including known threat actors and Tor settings

## Path parameters

- `app_id` integer, required

## Response `200`

The IP lists configuration has been successfully fetched

- object
  - `known_threat_actors` object[]
    - `code` string
    - `name` string
    - `mode` 'ignore' | 'monitor' | 'block': ignore: Not subscribed, monitor: Subscribed but monitoring only, block: Subscribed and blocking
  - `tor` object
    - `mode` 'ignore' | 'monitor' | 'block': ignore: Not subscribed, monitor: Subscribed but monitoring only, block: Subscribed and blocking

## Other responses

- `404`: App not found

---

[API](https://skmtc.dev/aikido/apis/aikido-security-api-documentation.md) - [All operations](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/aikido/apis/aikido-security-api-documentation/revisions/da8691338133?raw)