Fetches extension insights categorized by data leakage, potential threat, dangerous, recently detected, or dangerous permissions summary.
https://{serverurl}/bsp/api/v1/bmp/extension
Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52
Extension insight category (required). Example: 'data_leakage', 'potential_threat', 'dangerous', 'recents', 'default'
curl --request GET \
--url https://appdomains/bsp/api/v1/bmp/extension \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52'Extension insight response for data_leakage, potential_threat, or dangerous categories
Extensions categorized as data leakage risks
Individual extension in an insight category
Display name of the extension
Unique identifier of the extension
Webstore or internal ID of the extension
Number of managed resources with this extension
Unauthorized error code: credentials missing, expired, or invalid
Authentication failure reason
Error code indicating insufficient permissions
Message indicating insufficient privileges to access this resource
Rate limit error code returned when the API call reached threshold
Rate limit exceeded message with retry guidance
Internal server error during extension operations
Error message describing the server failure
Error code for internal server errors
Data leakage insights
{
"data_leakage": [
{
"extension_id": 100,
"name": "Data Scraper",
"Id": "abcdefghijklmnop",
"resource_count": 15
}
]
}
Data leakage empty
{
"data_leakage": []
}
Potential threat insights
{
"potential_threat": [
{
"extension_id": 100,
"name": "Sample Extension",
"Id": "abcdefghijklmnopqrstuvwxyz",
"resource_count": 10
}
]
}
Potential threat empty
{
"potential_threat": []
}
Dangerous insights
{
"dangerous": [
{
"extension_id": 100,
"name": "Sample Extension",
"Id": "abcdefghijklmnopqrstuvwxyz",
"resource_count": 8
}
]
}
Dangerous empty
{
"dangerous": []
}
Recent extensions
{
"recent_extensions": [
{
"extension_id": 101,
"detected_time": 1741651200000,
"name": "Recently Detected Extension",
"Id": "mnopqrstuvwxyzabcdefghijkl",
"resource_count": 3
}
]
}
Recent extensions empty
{
"recent_extensions": []
}
Dangerous permissions summary
{
"dangerous_permission": [
{
"name": "webRequest",
"id": 105,
"extension_ids": [
100,
101
]
},
{
"name": "nativeMessaging",
"id": 106,
"extension_ids": [
104
]
}
],
"total_extensions": "50"
}
Dangerous permissions empty
{
"dangerous_permission": [],
"total_extensions": "31"
}
Unauthorized
{
"errorCode": "UNAUTHORIZED",
"errorMsg": "You are not authorized to perform this action"
}
Forbidden
{
"errorCode": "FORBIDDEN",
"errorMsg": "You do not have permission to access this resource"
}
Rate limit exceeded
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
Server error
{
"error_description": "Internal Server error, Please try again in a moment.",
"error_code": "COM0004"
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.