Returns a network-wide compliance and vulnerability summary across all managed devices.
get /bsp/api/v1/bmp/compliance
https://{serverurl}/bsp/api/v1/bmp/compliance
Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52
curl --request GET \
--url https://appdomains/bsp/api/v1/bmp/compliance \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52'Count of devices with very high vulnerability risk
Count of devices with high vulnerability risk
Count of devices with low vulnerability risk
Count of devices classified as secure
Total count of compliant devices
Total count of noncompliant devices
Unauthorized error code: credentials missing, expired, or invalid
Authentication failure reason
Error code indicating insufficient permissions
Message indicating insufficient privileges to access this resource
Rate limit error code returned when the API call reached threshold
Rate limit exceeded message with retry guidance
Message describing the server-side failure
Internal server error code
Network-wide overview against the default compliance profile
{
"noncompliant": 17,
"HighVul": 12,
"LowRisk": 30,
"Secure": 150,
"compliant": 180,
"VeryHighVul": 5
}
Unauthorized
{
"errorCode": "UNAUTHORIZED",
"errorMsg": "You are not authorized to perform this action"
}
Forbidden
{
"errorCode": "FORBIDDEN",
"errorMsg": "You do not have permission to access this resource"
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
Server error
{
"error_description": "Internal Server error, Please try again in a moment.",
"error_code": "COM0004"
}
![]()
Duration: 1 minute | Threshold: 120 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.