Skip to content
Start here

Get application details

client.zeroTrust.casb.applications.get("ANTHROPIC" | "AWS" | "BITBUCKET" | 12 moreapplicationID, ApplicationGetParams { account_id } params, RequestOptionsoptions?): ApplicationGetResponse { id, auth_methods, category, 6 more }
GET/accounts/{account_id}/one/applications/{application_id}

Returns full application details including auth methods, use cases, and permissions.

Security
API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token.

Example:Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.

Example:X-Auth-Email: user@example.com

The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.

Example:X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
ParametersExpand Collapse
applicationID: "ANTHROPIC" | "AWS" | "BITBUCKET" | 12 more
One of the following:
"ANTHROPIC"
"AWS"
"BITBUCKET"
"BOX"
"CONFLUENCE"
"DROPBOX"
"GITHUB"
"GOOGLE_CLOUD_PLATFORM"
"GOOGLE_WORKSPACE"
"JIRA"
"MICROSOFT_INTERNAL"
"OPENAI"
"SALESFORCE"
"SERVICENOW"
"SLACK"
params: ApplicationGetParams { account_id }
account_id: string

Cloudflare account identifier.

ReturnsExpand Collapse
ApplicationGetResponse { id, auth_methods, category, 6 more }

The requested item.

id: "ANTHROPIC" | "AWS" | "BITBUCKET" | 12 more

Vendor identifier.

  • ANTHROPIC - ANTHROPIC
  • AWS - AWS
  • BITBUCKET - BITBUCKET
  • BOX - BOX
  • CONFLUENCE - CONFLUENCE
  • DROPBOX - DROPBOX
  • GITHUB - GITHUB
  • GOOGLE_CLOUD_PLATFORM - GOOGLE_CLOUD_PLATFORM
  • GOOGLE_WORKSPACE - GOOGLE_WORKSPACE
  • JIRA - JIRA
  • MICROSOFT_INTERNAL - MICROSOFT_INTERNAL
  • OPENAI - OPENAI
  • SALESFORCE - SALESFORCE
  • SERVICENOW - SERVICENOW
  • SLACK - SLACK
One of the following:
"ANTHROPIC"
"AWS"
"BITBUCKET"
"BOX"
"CONFLUENCE"
"DROPBOX"
"GITHUB"
"GOOGLE_CLOUD_PLATFORM"
"GOOGLE_WORKSPACE"
"JIRA"
"MICROSOFT_INTERNAL"
"OPENAI"
"SALESFORCE"
"SERVICENOW"
"SLACK"
auth_methods: Array<AuthMethod>

Available authentication methods.

id: string

Auth method identifier.

display_name: string

Human-readable auth method name.

is_default: boolean

Whether this is the default auth method.

supported_environments: Array<string>

Environments this auth method supports.

category: string

Vendor category.

description: string

Brief description.

display_name: string

Human-readable vendor name.

dlp_enabled: boolean

Whether DLP scanning is supported.

instructions: string | null

Setup instructions for the user.

use_cases: Array<UseCase>

Use cases with full scope details.

id: string

Use case identifier.

base_scopes: Array<BaseScope>

Scopes always required for this use case.

display_name: string

Human-readable permission name.

scope: string

Vendor-native scope identifier.

severity: "low" | "medium" | "high" | "critical"

Permission sensitivity level.

  • low - low
  • medium - medium
  • high - high
  • critical - critical
One of the following:
"low"
"medium"
"high"
"critical"
description: string

Use case description.

display_name: string

Human-readable use case name.

features: Array<Feature>

Optional features with extra scopes.

id: string

Feature identifier.

description: string

Feature description.

display_name: string

Human-readable feature name.

scopes: Array<Scope>

Additional scopes when feature is enabled.

display_name: string

Human-readable permission name.

scope: string

Vendor-native scope identifier.

severity: "low" | "medium" | "high" | "critical"

Permission sensitivity level.

  • low - low
  • medium - medium
  • high - high
  • critical - critical
One of the following:
"low"
"medium"
"high"
"critical"

Get application details

import Cloudflare from 'cloudflare';

const client = new Cloudflare({
  apiToken: process.env['CLOUDFLARE_API_TOKEN'], // This is the default and can be omitted
});

const application = await client.zeroTrust.casb.applications.get('ANTHROPIC', {
  account_id: '023e105f4ecef8ad9ca31a8372d0c353',
});

console.log(application.id);
{
  "errors": [],
  "messages": [],
  "result": {
    "auth_methods": [
      {
        "display_name": "OAuth 2.0 Admin Consent",
        "id": "oauth2",
        "is_default": true,
        "supported_environments": [
          "standard",
          "fedramp"
        ]
      }
    ],
    "category": "Productivity",
    "description": "Monitor OneDrive, SharePoint, Teams, and Outlook.",
    "display_name": "Microsoft",
    "dlp_enabled": true,
    "id": "MICROSOFT_INTERNAL",
    "instructions": "You'll need a Microsoft 365 admin account with Global Admin or Application Admin role.",
    "logo": "/api/v4/accounts/12345678/casb/static/microsoft_internal.svg",
    "use_cases": [
      {
        "base_scopes": [
          {
            "display_name": "Read all users' full profiles",
            "scope": "User.Read.All",
            "severity": "high"
          },
          {
            "display_name": "Read all files",
            "scope": "Files.Read.All",
            "severity": "high"
          }
        ],
        "description": "Discover and secure SaaS applications",
        "display_name": "Cloud Access Security Broker",
        "features": [
          {
            "description": "Automatically remediate security issues",
            "display_name": "Auto Remediation",
            "id": "auto_remediation",
            "scopes": [
              {
                "display_name": "Read and write all files",
                "scope": "Files.ReadWrite.All",
                "severity": "critical"
              }
            ]
          }
        ],
        "id": "casb"
      }
    ]
  },
  "success": true
}
Returns Examples
{
  "errors": [],
  "messages": [],
  "result": {
    "auth_methods": [
      {
        "display_name": "OAuth 2.0 Admin Consent",
        "id": "oauth2",
        "is_default": true,
        "supported_environments": [
          "standard",
          "fedramp"
        ]
      }
    ],
    "category": "Productivity",
    "description": "Monitor OneDrive, SharePoint, Teams, and Outlook.",
    "display_name": "Microsoft",
    "dlp_enabled": true,
    "id": "MICROSOFT_INTERNAL",
    "instructions": "You'll need a Microsoft 365 admin account with Global Admin or Application Admin role.",
    "logo": "/api/v4/accounts/12345678/casb/static/microsoft_internal.svg",
    "use_cases": [
      {
        "base_scopes": [
          {
            "display_name": "Read all users' full profiles",
            "scope": "User.Read.All",
            "severity": "high"
          },
          {
            "display_name": "Read all files",
            "scope": "Files.Read.All",
            "severity": "high"
          }
        ],
        "description": "Discover and secure SaaS applications",
        "display_name": "Cloud Access Security Broker",
        "features": [
          {
            "description": "Automatically remediate security issues",
            "display_name": "Auto Remediation",
            "id": "auto_remediation",
            "scopes": [
              {
                "display_name": "Read and write all files",
                "scope": "Files.ReadWrite.All",
                "severity": "critical"
              }
            ]
          }
        ],
        "id": "casb"
      }
    ]
  },
  "success": true
}