What this endpoint does

Lists static asset rules for an ASI project — the manually defined scope rules that include or exclude specific hostnames, IPv4 addresses, or wildcard patterns from attack surface monitoring. Get your project_id from ASI Projects: List. Use this to audit current scope before modifying rules via ASI Rules: Add Static Assets. Filter by static_type, membership_type, asset name, or timestamp ranges (last_applied_before/last_applied_after). Set include_deleted=true to see rules that were removed — useful for auditing scope changes over time. Cursor-paginated; default 100 results, max 1,000.

Response data

Returns your project's static scope rules — the manual include/exclude definitions that shape what the ASI scanner considers in-scope. Each rule shows whether it's an inclusion or exclusion, what kind of asset it targets (hostname, IPv4, wildcard), and when it was last applied by the scanning engine. The global_state and project_state fields reflect processing status — empty objects mean the rule is active and healthy. Use last_applied_at timestamps to verify rules are being picked up by scans. Cursor-paginated via next_cursor; note that total count may be null.