---
title: "Create Wiz integration"
method: POST
path: "/integrations/wiz"
tags: ["wiz-integrations"]
---

# Create Wiz integration

`POST /integrations/wiz`

## Request

- Base URL: `https://example.scalr.io/api/iacp/v3`
- URL: `https://example.scalr.io/api/iacp/v3/integrations/wiz`
- Auth: HTTP bearer

This endpoint creates a Wiz integration.

## Query parameters

- `include` string[]

## Request body

- WizIntegrationDocument: JSON:API Document. see: https://jsonapi.org/format/#document-structure
  - `data` WizIntegration
    - `attributes` object, required
      - `autofail` boolean: Block the run when the Wiz scan fails or cannot run. When disabled, Wiz failures are represented in the following Scalr policy check and do not block the Wiz stage.
      - `client-id` string, required: Wiz service-account client ID.
      - `client-secret` string, nullable: Wiz service-account client secret. Accepted on create and update, and returned as null in responses.
      - `default-policies` string[], nullable: Wiz policy names passed to wizcli (--policies), one list item per policy.
      - `default-scan-name` string, nullable: Default scan name passed to wizcli (--name). When unset, scans are named `{workspace}-{run}`.
      - `endpoint-mode` 'commercial' | 'govcloud' | 'fedramp': Wiz tenant region: the commercial, GovCloud, or FedRAMP auth/API host.
      - `err-message` string, nullable: Message from service that points to the nature of a problem.
      - `is-shared` boolean: Indicates whether the integration is available in any existing or future environment of the account without directly linking it.
      - `name` string, required: Name of the Wiz integration.
      - `status` 'active' | 'disabled' | 'failed' | 'pending': Status of the integration.
    - `id` string
    - `links` object
      - `self` string
    - `relationships` object
      - `environments` object: The list of environments this integration is linked to.
        - `data` object[], nullable, required
          - `id` string, required
          - `type` 'environments' | '', required
    - `type` 'wiz-integrations', required
  - `included` object[]
  - `meta` object

## Response `201`

Success.

- WizIntegrationDocument: JSON:API Document. see: https://jsonapi.org/format/#document-structure
  - `data` WizIntegration
    - `attributes` object, required
      - `autofail` boolean: Block the run when the Wiz scan fails or cannot run. When disabled, Wiz failures are represented in the following Scalr policy check and do not block the Wiz stage.
      - `client-id` string, required: Wiz service-account client ID.
      - `client-secret` string, nullable: Wiz service-account client secret. Accepted on create and update, and returned as null in responses.
      - `default-policies` string[], nullable: Wiz policy names passed to wizcli (--policies), one list item per policy.
      - `default-scan-name` string, nullable: Default scan name passed to wizcli (--name). When unset, scans are named `{workspace}-{run}`.
      - `endpoint-mode` 'commercial' | 'govcloud' | 'fedramp': Wiz tenant region: the commercial, GovCloud, or FedRAMP auth/API host.
      - `err-message` string, nullable: Message from service that points to the nature of a problem.
      - `is-shared` boolean: Indicates whether the integration is available in any existing or future environment of the account without directly linking it.
      - `name` string, required: Name of the Wiz integration.
      - `status` 'active' | 'disabled' | 'failed' | 'pending': Status of the integration.
    - `id` string
    - `links` object
      - `self` string
    - `relationships` object
      - `environments` object: The list of environments this integration is linked to.
        - `data` object[], nullable, required
          - `id` string, required
          - `type` 'environments' | '', required
    - `type` 'wiz-integrations', required
  - `included` object[]
  - `meta` object

## Other responses

- `404`: Account not found or user unauthorized to perform action.
- `409`: The account already has a Wiz integration, or Wiz is unreachable.
- `4XX`: Client error.
- `5XX`: Server error.

## Changes

- **2026-11-03** `d3e1dc85657a`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/scalr/apis/scalr-iacp-api/changes/integrations/wiz/post.md)

---

[API](https://skmtc.dev/scalr/apis/scalr-iacp-api.md) - [All operations](https://skmtc.dev/scalr/apis/scalr-iacp-api/llms.txt) - [OpenAPI document](https://skmtc.dev/scalr/apis/scalr-iacp-api/revisions/d3e1dc85657a?raw)