Update Threat Protection Policy

Full-document update. Unspecified fields reset to defaults. Enterprise feature, team admins only.

1 min read

put/team/threat-protection

Request example

curl --request PUT \
  --url https://api.firecrawl.dev/v2/team/threat-protection \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "mode": "normal",
  "riskScoreThreshold": 75,
  "blacklist": [
    "*.risky.example"
  ],
  "whitelist": [
    "*.trusted.example"
  ],
  "blockedTlds": [
    "zip"
  ],
  "failurePolicy": "closed",
  "allowRequestOverrides": true
}'

Response

{
  "success": true,
  "data": {
    "mode": "normal",
    "riskScoreThreshold": 75,
    "blacklist": [
      "*.risky.example"
    ],
    "whitelist": [
      "*.trusted.example"
    ],
    "blockedTlds": [
      "zip"
    ],
    "failurePolicy": "closed",
    "allowRequestOverrides": true,
    "configured": true,
    "updatedAt": "2026-08-10T12:00:00Z"
  }
}

put/team/threat-protection

Full-document update of your organization's threat protection policy. Unspecified fields reset to defaults. Team admins only.

Authorization

Authorizationstringheaderrequired#

Bearer authentication header of the form Bearer <token>, where <token> is your API key.

Body

application/json

modeenum<string>required#

Threat protection mode. off disables checks; normal checks URLs against Google Web Risk (+2 credits per URL scanned).

Options:offnormal

riskScoreThresholdinteger#

Normalized score (0-100) at or above which a classifier verdict is blocked. Lower is stricter.

Range: 0–100

blackliststring[]#

Exact domains or globs (e.g. *.example.com) always blocked, without a classifier call.

whiteliststring[]#

Exact domains or globs always allowed. Wins over every other rule.

blockedTldsstring[]#

Top-level domains to block outright, lowercase without a leading dot.

failurePolicyenum<string>#

Behavior when the classifier is unreachable: closed blocks (default), open allows.

Options:openclosed

allowRequestOverridesboolean#

Whether individual requests may pass a threatProtection object. When false, such requests are rejected with 403.

Responses

application/json

Effective threat protection policy for the team's organization.

successboolean#

dataobject#

Show child attributes

modeenum<string>#