Read Firewall Actions by Project

APIs & SDKs

GEThttps://api.vercel.com/v1/security/firewall/events

Retrieve firewall actions for a project Rule names are resolved against the project's current active firewall configuration and the team's active rulesets, so a rule that has since been renamed reports its new name and one that has been deleted reports null. System rules such as sys_dos_mitigation and ip_blocking have no configured name and always report null. Filters (ip, isActive, action, actionType, ruleKind, ruleId, hosts) are ANDed across params and ORed within a repeated param. They are applied to the policies before limit/cursor, so pages only count matching policies. A policy with no matching requests yields no action row, so a page can hold fewer than limit actions; only pagination.next signals the end. A cursor is only valid with the filters it was issued for.

https://api.vercel.com/v1/security/firewall/events

const response = await fetch('https://api.vercel.com/v1/security/firewall/events?sort=string&limit=123&cursor=string&projectId=string&startTimestamp=123&endTimestamp=123&hosts=string&ip=[]&isActive=true&action=[]&actionType=[]&ruleKind=string&ruleId=[]&teamId=string&slug=string', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer YOUR_ACCESS_TOKEN',
    'Content-Type': 'application/json',
  },
});

const data = await response.json();
console.log(data);

Response

{
  "actions": [
    {
      "action": "string",
      "action_type": "string",
      "count": "123",
      "endTime": "string",
      "host": "string",
      "isActive": "false",
      "public_ip": "string",
      "ruleId": "example_id",
      "ruleName": "Example Name",
      "startTime": "string"
    }
  ],
  "pagination": {
    "hasMore": "false",
    "next": "string"
  }
}

Authentication

AuthorizationbearerToken

Default authentication mechanism

Query parameters

sortstringOptional

limitnumberOptional

cursorstringOptional

projectIdstringRequired

startTimestampnumberOptional

endTimestampnumberOptional

hostsstringOptional

iparrayOptional

isActivebooleanOptional

actionarrayOptional

actionTypearrayOptional

ruleKindstringOptional

ruleIdarrayOptional

teamIdstringOptional

The Team identifier to perform the request on behalf of.

slugstringOptional

The Team slug to perform the request on behalf of.

Response

200Success

actionsarrayRequired

paginationobjectRequired

Errors

400One of the provided values in the request query is invalid.

401The request is not authorized.

403You do not have permission to access this resource.

404Error

408Error

410Error

500Error

Cross-link map: Read Firewall Actions by Project (/docs/rest-api/security/read-firewall-actions-by-project)

From the Vercel docs graph (built 2026-10-13T05:35:52.211Z), spanning vercel.com docs + KB, nextjs.org, ai-sdk.dev, and other Vercel documentation sites. Full graph as JSON: https://vercel.com/docs/graph.json

Semantically closest pages

Read Firewall Actions Summary by Project — GET /v1/security/firewall/events/summary — Aggregate counts over the firewall actions matched by the same filters as \`G
Update Firewall Configuration — PATCH /v1/security/firewall/config — Process updates to modify the existing firewall config for a project
Returns activated WAF config — GET /v1/security/firewall/config — Lists WAF configs for a project
Read Firewall Configuration — GET /v1/security/firewall/config/{configVersion} — Retrieve the specified firewall configuration for a project. The depl
Read System Bypass — GET /v1/security/firewall/bypass — Retrieve the system bypass rules configured for the specified project

This page links to (1)

Vercel REST API Reference — Interact programmatically with your Vercel account using the SDK or direct HTTP requests.

Pages that link here (1)

By site: vercel-docs (1)

Vercel REST API Reference — Interact programmatically with your Vercel account using the SDK or direct HTTP requests.

https://api.vercel.com/v1/security/firewall/events

const response = await fetch('https://api.vercel.com/v1/security/firewall/events?sort=string&limit=123&cursor=string&projectId=string&startTimestamp=123&endTimestamp=123&hosts=string&ip=[]&isActive=true&action=[]&actionType=[]&ruleKind=string&ruleId=[]&teamId=string&slug=string', {
  method: 'GET',
  headers: {
    'Authorization': 'Bearer YOUR_ACCESS_TOKEN',
    'Content-Type': 'application/json',
  },
});

const data = await response.json();
console.log(data);

Response

{
  "actions": [
    {
      "action": "string",
      "action_type": "string",
      "count": "123",
      "endTime": "string",
      "host": "string",
      "isActive": "false",
      "public_ip": "string",
      "ruleId": "example_id",
      "ruleName": "Example Name",
      "startTime": "string"
    }
  ],
  "pagination": {
    "hasMore": "false",
    "next": "string"
  }
}

OpenAPI Specification