---
title: "Sources used and allowed on the served plan."
method: GET
path: "/surveillance/quota"
tags: ["surveillance"]
---

# Sources used and allowed on the served plan.

`GET /surveillance/quota`

## Request

- Base URL: `https://api.ismalicious.com`
- URL: `https://api.ismalicious.com/surveillance/quota`
- Auth: one of:
  - API key in header `X-API-KEY`
  - HTTP bearer
  - HTTP basic

## Response `200`

OK

- QuotaDto
  - `byKind` QuotaByKind, required
    - `DOMAIN` QuotaLine, required
      - `limit` integer, nullable: `None` = no per-kind limit (only the total applies).
      - `used` integer, required
    - `LOCKFILE` QuotaLine, required
      - `limit` integer, nullable: `None` = no per-kind limit (only the total applies).
      - `used` integer, required
    - `MANUAL` QuotaLine, required
      - `limit` integer, nullable: `None` = no per-kind limit (only the total applies).
      - `used` integer, required
  - `defaultStackComponents` QuotaLine, required
    - `limit` integer, nullable: `None` = no per-kind limit (only the total applies).
    - `used` integer, required
  - `limit` integer, required
  - `plan` string, required: The served plan (`billing::effective_plan_name`).
  - `used` integer, required

## Other responses

- `400`: Invalid request
- `401`: Unauthorized

## Changes

- **2026-10-23** `7c8ce9039cf7`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/changes/surveillance/quota/get.md)

---

[API](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api.md) - [All operations](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/llms.txt) - [OpenAPI document](https://skmtc.dev/ismalicious/apis/ismalicious-threat-intelligence-api/revisions/b6f45e6169a7?raw)