---
title: "Get threat lists"
method: GET
path: "/firewall/apps/{app_id}/ip-lists"
---

# Get threat lists

`GET /firewall/apps/{app_id}/ip-lists`

Get the IP lists configuration for an app including known threat actors and Tor settings

## Path parameters

- `app_id` integer, required

## Response `200`

The IP lists configuration has been successfully fetched

- object
  - `known_threat_actors` object[]
    - `code` string
    - `name` string
    - `mode` 'ignore' | 'monitor' | 'block' — ignore: Not subscribed, monitor: Subscribed but monitoring only, block: Subscribed and blocking
  - `tor` object
    - `mode` 'ignore' | 'monitor' | 'block' — ignore: Not subscribed, monitor: Subscribed but monitoring only, block: Subscribed and blocking

## Other responses

- `404` — App not found

---

[API](https://skmtc.dev/aikido/apis/authorization.md) · [All operations](https://skmtc.dev/aikido/apis/authorization/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/aikido/authorization/revisions/5445e7c21137/schema)