---
title: "List Web Application Firewalls (WAFs)"
method: GET
path: "/workspace/wafs"
tags: ["WAFs"]
---

# List Web Application Firewalls (WAFs)

`GET /workspace/wafs`

List all WAFs owned by your account.

## Query parameters

- `fields` string
- `id` integer
- `name` string
- `ordering` string
- `page` integer
- `page_size` integer
- `search` string

## Response `200`

List of WAFs retrieved successfully.

- PaginatedWAFList
  - `count` integer — Total number of items
  - `total_pages` integer — Total number of pages
  - `page` integer — Current page number
  - `page_size` integer — Number of items per page
  - `next` string, uri, nullable — URL to the next page of results
  - `previous` string, uri, nullable — URL to the previous page of results
  - `results` WAF[]
    - `id` integer, required
    - `active` boolean
    - `name` string, required
    - `last_editor` string, required
    - `last_modified` string, date-time, required
    - `product_version` string, nullable
    - `engine_settings` WAFEngineSettingsField
      - `engine_version` '2021-Q3' — * `2021-Q3` - 2021-Q3
      - `type` 'score' — * `score` - score
      - `attributes` WAFEngineSettingsAttributesField
        - `rulesets` RulesetsEnum[]
        - `thresholds` ThresholdsConfigField[]
          - `threat` 'cross_site_scripting' | 'directory_traversal' | 'evading_tricks' | 'file_upload' | 'identified_attack' | 'remote_file_inclusion' | 'sql_injection' | 'unwanted_access', required — * `cross_site_scripting` - cross_site_scripting * `directory_traversal` - directory_traversal * `evading_tricks` - evading_tricks * `file_upload` - file_upload * `identified_attack` - identified_attack * `remote_file_inclusion` - remote_file_inclusion * `sql_injection` - sql_injection * `unwanted_access` - unwanted_access
          - `sensitivity` 'highest' | 'high' | 'medium' | 'low' | 'lowest' — * `highest` - Highest * `high` - High * `medium` - Medium * `low` - Low * `lowest` - Lowest

## Other responses

- `400` — Validation Error
- `401` — Authentication Failed
- `403` — Permission Denied
- `404` — Not Found
- `405` — Method Not Allowed
- `406` — Not Acceptable
- `429` — Throttled
- `500` — Internal Server Error

---

[API](https://skmtc.dev/azion/apis/azion-api.md) · [All operations](https://skmtc.dev/azion/apis/azion-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/azion/azion-api/revisions/bb3250697218/schema)