--- title: Insights --- [Skip to content](#%5Ftop) [API Reference](https://developers.cloudflare.com/api/typescript) [Security Center](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter) Copy Markdown Open in **Claude** Open in **ChatGPT** Open in **Cursor** --- **Copy Markdown** **View as Markdown** # Insights ##### [Retrieves Security Center Insights](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter/subresources/insights/methods/list) client.securityCenter.insights.list(InsightListParams { account\_id, zone\_id, dismissed, 12 more } params?, RequestOptionsoptions?): V4PagePagination<[InsightListResponse](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter#%28resource%29%20security%5Fcenter.insights%20%3E%20%28model%29%20insight%5Flist%5Fresponse%20%3E%20%28schema%29) { count, issues, page, per\_page } \> GET/{accounts\_or\_zones}/{account\_or\_zone\_id}/security-center/insights ##### [Archives Security Center Insight](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter/subresources/insights/methods/dismiss) client.securityCenter.insights.dismiss(stringissueID, InsightDismissParams { account\_id, zone\_id, dismiss } params, RequestOptionsoptions?): [InsightDismissResponse](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter#%28resource%29%20security%5Fcenter.insights%20%3E%20%28model%29%20insight%5Fdismiss%5Fresponse%20%3E%20%28schema%29) { errors, messages, success } PUT/{accounts\_or\_zones}/{account\_or\_zone\_id}/security-center/insights/{issue\_id}/dismiss ##### ModelsExpand Collapse InsightListResponse { count, issues, page, per\_page } count?: number Indicates the total number of results. issues?: Array id?: string dismissed?: boolean has\_extended\_context?: boolean Indicates whether the insight has a large payload that requires fetching via the context endpoint. issue\_class?: string issue\_type?: [IssueType](https://developers.cloudflare.com/api/typescript/resources/intel#%28resource%29%20intel.attack%5Fsurface%5Freport.issues%20%3E%20%28model%29%20issue%5Ftype%20%3E%20%28schema%29) payload?: Payload { detection\_method, zone\_tag } detection\_method?: string Describes the method used to detect insight. zone\_tag?: string resolve\_link?: string resolve\_text?: string severity?: "Low" | "Moderate" | "Critical" One of the following: "Low" "Moderate" "Critical" since?: string formatdate-time status?: "active" | "resolved" The current status of the insight. One of the following: "active" "resolved" subject?: string timestamp?: string formatdate-time user\_classification?: "false\_positive" | "accept\_risk" | "other" | null User-defined classification for the insight. Can be ‘false\_positive’, ‘accept\_risk’, ‘other’, or null. One of the following: "false\_positive" "accept\_risk" "other" page?: number Specifies the current page within paginated list of results. per\_page?: number Sets the number of results per page of results. maximum1000 minimum1 InsightDismissResponse { errors, messages, success } errors: Array code: number minimum1000 message: string documentation\_url?: string source?: Source { pointer } pointer?: string messages: Array code: number minimum1000 message: string documentation\_url?: string source?: Source { pointer } pointer?: string success: true Whether the API call was successful. #### InsightsClass ##### [Retrieves Security Center Insight Counts by Class](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter/subresources/insights/subresources/class/methods/get) client.securityCenter.insights.class.get(ClassGetParams { account\_id, zone\_id, dismissed, 10 more } params?, RequestOptionsoptions?): [ClassGetResponse](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter#%28resource%29%20security%5Fcenter.insights.class%20%3E%20%28model%29%20class%5Fget%5Fresponse%20%3E%20%28schema%29) { count, value } GET/{accounts\_or\_zones}/{account\_or\_zone\_id}/security-center/insights/class ##### ModelsExpand Collapse ClassGetResponse \= Array count?: number value?: string #### InsightsSeverity ##### [Retrieves Security Center Insight Counts by Severity](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter/subresources/insights/subresources/severity/methods/get) client.securityCenter.insights.severity.get(SeverityGetParams { account\_id, zone\_id, dismissed, 10 more } params?, RequestOptionsoptions?): [SeverityGetResponse](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter#%28resource%29%20security%5Fcenter.insights.severity%20%3E%20%28model%29%20severity%5Fget%5Fresponse%20%3E%20%28schema%29) { count, value } GET/{accounts\_or\_zones}/{account\_or\_zone\_id}/security-center/insights/severity ##### ModelsExpand Collapse SeverityGetResponse \= Array count?: number value?: string #### InsightsType ##### [Retrieves Security Center Insight Counts by Type](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter/subresources/insights/subresources/type/methods/get) client.securityCenter.insights.type.get(TypeGetParams { account\_id, zone\_id, dismissed, 10 more } params?, RequestOptionsoptions?): [TypeGetResponse](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter#%28resource%29%20security%5Fcenter.insights.type%20%3E%20%28model%29%20type%5Fget%5Fresponse%20%3E%20%28schema%29) { count, value } GET/{accounts\_or\_zones}/{account\_or\_zone\_id}/security-center/insights/type ##### ModelsExpand Collapse TypeGetResponse \= Array count?: number value?: string #### InsightsAudit Logs ##### [Retrieves account or zone Audit Log](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter/subresources/insights/subresources/audit%5Flogs/methods/list) client.securityCenter.insights.auditLogs.list(AuditLogListParams { account\_id, zone\_id, before, 6 more } params?, RequestOptionsoptions?): CursorPagination<[AuditLogListResponse](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter#%28resource%29%20security%5Fcenter.insights.audit%5Flogs%20%3E%20%28model%29%20audit%5Flog%5Flist%5Fresponse%20%3E%20%28schema%29) { id, changed\_at, changed\_by, 6 more } \> GET/{accounts\_or\_zones}/{account\_or\_zone\_id}/security-center/insights/audit-log ##### [Retrieves Issue Audit Log](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter/subresources/insights/subresources/audit%5Flogs/methods/list%5Fby%5Finsight) client.securityCenter.insights.auditLogs.listByInsight(stringissueID, AuditLogListByInsightParams { account\_id, zone\_id, before, 6 more } params?, RequestOptionsoptions?): CursorPagination<[AuditLogListByInsightResponse](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter#%28resource%29%20security%5Fcenter.insights.audit%5Flogs%20%3E%20%28model%29%20audit%5Flog%5Flist%5Fby%5Finsight%5Fresponse%20%3E%20%28schema%29) { id, changed\_at, changed\_by, 6 more } \> GET/{accounts\_or\_zones}/{account\_or\_zone\_id}/security-center/insights/{issue\_id}/audit-log ##### ModelsExpand Collapse AuditLogListResponse { id, changed\_at, changed\_by, 6 more } id?: string UUIDv7 identifier for the audit log entry, time-ordered. formatuuid changed\_at?: string The timestamp when the change occurred. formatdate-time changed\_by?: string The actor that made the change. ‘system’ for automated changes, or a user identifier. current\_value?: string | null The value of the field after the change. Null if the field was cleared. field\_changed?: "status" | "user\_classification" The field that was changed. One of the following: "status" "user\_classification" issue\_id?: string The ID of the insight this audit log entry relates to. previous\_value?: string | null The value of the field before the change. Null if the field was not previously set. rationale?: string | null Optional rationale provided for the change. zone\_id?: number The zone ID associated with the insight. Only present for zone-level insights. formatint64 AuditLogListByInsightResponse { id, changed\_at, changed\_by, 6 more } id?: string UUIDv7 identifier for the audit log entry, time-ordered. formatuuid changed\_at?: string The timestamp when the change occurred. formatdate-time changed\_by?: string The actor that made the change. ‘system’ for automated changes, or a user identifier. current\_value?: string | null The value of the field after the change. Null if the field was cleared. field\_changed?: "status" | "user\_classification" The field that was changed. One of the following: "status" "user\_classification" issue\_id?: string The ID of the insight this audit log entry relates to. previous\_value?: string | null The value of the field before the change. Null if the field was not previously set. rationale?: string | null Optional rationale provided for the change. zone\_id?: number The zone ID associated with the insight. Only present for zone-level insights. formatint64 #### InsightsClassification ##### [Updates Security Center Insight Classification](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter/subresources/insights/subresources/classification/methods/update) client.securityCenter.insights.classification.update(stringissueID, ClassificationUpdateParams { account\_id, zone\_id, classification, rationale } params, RequestOptionsoptions?): [ClassificationUpdateResponse](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter#%28resource%29%20security%5Fcenter.insights.classification%20%3E%20%28model%29%20classification%5Fupdate%5Fresponse%20%3E%20%28schema%29) { errors, messages, success } PATCH/{accounts\_or\_zones}/{account\_or\_zone\_id}/security-center/insights/{issue\_id}/classification ##### ModelsExpand Collapse ClassificationUpdateResponse { errors, messages, success } errors: Array code: number minimum1000 message: string documentation\_url?: string source?: Source { pointer } pointer?: string messages: Array code: number minimum1000 message: string documentation\_url?: string source?: Source { pointer } pointer?: string success: true Whether the API call was successful. #### InsightsContext ##### [Retrieves Security Center Insight Context](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter/subresources/insights/subresources/context/methods/get) client.securityCenter.insights.context.get(stringissueID, ContextGetParams { account\_id } params, RequestOptionsoptions?): [ContextGetResponse](https://developers.cloudflare.com/api/typescript/resources/security%5Fcenter#%28resource%29%20security%5Fcenter.insights.context%20%3E%20%28model%29%20context%5Fget%5Fresponse%20%3E%20%28schema%29) GET/accounts/{account\_id}/security-center/insights/{issue\_id}/context ##### ModelsExpand Collapse ContextGetResponse \= Record