What this endpoint does

Bulk-adds or removes static asset rules for an ASI project. Static assets are manually defined scope rules that include or exclude specific hostnames, IPv4 addresses, or wildcard patterns from attack surface monitoring. You need a project_id from ASI Projects: List. Use ASI Rules: Get Static Assets first to audit existing rules before making changes. Supply add_rules and/or remove_rules arrays — each rule requires asset, membership_type (include/exclude), and static_type (ipv4/hostname/wildcard). Max 1,000 rules per request. The operation is asynchronous — a successful response means the request was accepted, not that changes are live.

Response data

Returns confirmation of which rules were accepted for addition and removal, plus an errors array for any individual rules that failed. Always check the errors array even on HTTP 200 — partial failures are reported there, not via status code. An empty errors array means all rules were accepted. Note "accepted" does not mean "applied" — this is an async operation, so changes may take time to reflect in asset queries.