---
title: "Network security settings"
method: GET
path: "/api/organizations/{name}/settings/network-security"
tags: ["orgs"]
---

# Network security settings

`GET /api/organizations/{name}/settings/network-security`

Get the network security settings for an organization.

## Path parameters

- `name` string, required

## Response `200`

Network security settings

- object
  - `enforceAuth` boolean, required
  - `areCidrRangesApproved` boolean, required — Whether the declared ipRanges match the admin-validated CIDR ranges
  - `enforceIpRestriction` boolean, required
  - `highRateLimits` boolean, required
  - `ipRanges` string[], required
  - `blockedContents` object[], required
    - `resource` union, required
      - 'dataset' | 'model' | 'space' | 'bucket' | 'kernel' | 'container'
      - '*'
    - `scope` string, required
  - `allowedContents` object[], required
    - `resource` union, required
      - 'dataset' | 'model' | 'space' | 'bucket' | 'kernel' | 'container'
      - '*'
    - `scope` string, required
  - `keepReposMetadataVisible` boolean, required

## Changes

- **2026-09-18** `74f2b0d17636` — 2 warning
  - added the new `container` enum value to the `allowedContents/items/resource/anyOf[subschema #1]/` response property for the response status `200`
  - added the new `container` enum value to the `blockedContents/items/resource/anyOf[subschema #1]/` response property for the response status `200`
- **2026-09-09** `d91f6b18c721` — 2 info
  - response property `enforceAuth` list-of-types was narrowed by removing types `string` from media type `application/json` of response `200`
  - added the required property `areCidrRangesApproved` to the response with the `200` status
- **2026-09-08** `bd17546f47b8` — 1 breaking, 4 info
  - the `enforceAuth/anyOf[subschema #2]/` response's property type changed from no type to `string` for status `200`
  - added `subschema #1, subschema #2` to the `allowedContents/items/resource` response property `anyOf` list for the response status `200`
  - added `subschema #1, subschema #2` to the `blockedContents/items/resource` response property `anyOf` list for the response status `200`
  - removed `subschema #1, subschema #2` from the `allowedContents/items/resource` response property `anyOf` list for the response status `200`
  - …1 more
- **2026-07-26** `36390f25f00f` — 1 info
  - added the required property `keepReposMetadataVisible` to the response with the `200` status

[Change history](https://skmtc.dev/huggingface/apis/hub-api-endpoints/changes/api/organizations/:name/settings/network-security/get.md)

---

[API](https://skmtc.dev/huggingface/apis/hub-api-endpoints.md) · [All operations](https://skmtc.dev/huggingface/apis/hub-api-endpoints/llms.txt) · [OpenAPI document](https://skmtc.dev/huggingface/apis/hub-api-endpoints/revisions/61b0b9b74a8a?raw)