---
title: "List team traffic exclusions"
method: GET
path: "/api/user/teams/{id}/exclusions"
tags: ["Teams"]
---

# List team traffic exclusions

`GET /api/user/teams/{id}/exclusions`

## Request

- Base URL: `https://demo.hitkeep.com`
- URL: `https://demo.hitkeep.com/api/user/teams/{id}/exclusions`
- Auth: API key in cookie `hk_token`

Lists traffic exclusions owned by the team. Set effective=true to include inherited instance rules before team rules, newest-first within each scope. Inherited rows are read-only and omit cross-scope creator IDs. Requires team.manage_settings.

## Path parameters

- `id` string, uuid, required

## Query parameters

- `effective` boolean

## Response `200`

Team traffic exclusions

- IPExclusion[]
  - `cidr` string: Normalized IP or CIDR value for cidr rules.
  - `country_code` string: Uppercase ISO 3166-1 alpha-2 country code for country rules.
  - `created_at` string, date-time, required
  - `created_by` string, uuid: Creator ID. Omitted from inherited rows returned across scopes.
  - `description` string
  - `id` string, uuid, required
  - `inherited` boolean, required: True when returned through a child scope's effective read.
  - `path` string: Normalized, query-free, case-sensitive path matched on segment boundaries.
  - `scope` 'instance' | 'team' | 'site': Scope that owns this rule.
  - `site_id` string, uuid: Owning site for site rules.
  - `team_id` string, uuid: Owning team for team rules.
  - `type` 'cidr' | 'country' | 'user_agent' | 'path', required
  - `user_agent` string: Case-insensitive user-agent substring for user_agent rules.

## Other responses

- `403`: Access denied

---

[API](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api.md) · [All operations](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hitkeep/apis/hitkeep-rest-api/revisions/bb2df36ab2a4?raw)