# Retrieve extension insights by category

Fetches extension insights categorized by data leakage, potential threat, dangerous, recently detected, or dangerous permissions summary.

## Endpoint

**GET** `/bsp/api/v1/bmp/extension`

## Request

### Request URL

https://[*{serverurl}*](https://www.manageengine.com/products/desktop-central/help/api/cloud/oauth-authentication-endpoint-domain.html)/bsp/api/v1/bmp/extension

### Scope

`DesktopCentralCloud.BrowserManager.READ`

### Header

`Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52`

### Request Parameters

#### Request Headers

| Parameter | Type | Required | Value |
|---|---|---|---|
| Accept | string | Mandatory | application/json |

#### Query Parameters

| Parameter | Type | Required | Description |
|---|---|---|---|
| type | string | Optional | Extension insight category (required). Example: 'data_leakage', 'potential_threat', 'dangerous', 'recents', 'default' |

### Sample Request

```curl
curl --request GET \
  --url https://appdomains/bsp/api/v1/bmp/extension \
  --header 'Accept: application/json' \
  --header 'Authorization: Zoho-oauthtoken  d92d4xxxxxxxxxxxxx15f52'
```

## Response Parameters

### HTTP Code 200

**Response Body:** `application/json`

**Type:** JSON Object

Extension insight response for data_leakage, potential_threat, or dangerous categories.

| Attribute | Type | Description |
|---|---|---|
| data_leakage | JSON Array | Extensions categorized as data leakage risks |

### HTTP Code 401

**Response Body:** `application/json`

**Type:** JSON Object

| Attribute | Type | Description |
|---|---|---|
| errorCode | long | Unauthorized error code: credentials missing, expired, or invalid |
| errorMsg | string | Authentication failure reason |

### HTTP Code 403

**Response Body:** `application/json`

**Type:** JSON Object

| Attribute | Type | Description |
|---|---|---|
| errorCode | long | Error code indicating insufficient permissions |
| errorMsg | string | Message indicating insufficient privileges to access this resource |

### HTTP Code 429

**Response Body:** `application/json`

**Type:** JSON Object

| Attribute | Type | Description |
|---|---|---|
| errorCode | long | Rate limit error code returned when the API call reached threshold |
| errorMsg | string | Rate limit exceeded message with retry guidance |

### HTTP Code 500

**Response Body:** `application/json`

**Type:** JSON Object

Internal server error during extension operations.

| Attribute | Type | Description |
|---|---|---|
| error_description | string | Error message describing the server failure |
| error_code | string | Error code for internal server errors |

## Possible Response Codes

- `200` — HTTP code
- `401` — HTTP code
- `403` — HTTP code
- `429` — HTTP code
- `500` — HTTP code

## Sample Responses

### HTTP 200

#### Data leakage insights

```json
{
  "data_leakage": [
    {
      "extension_id": 100,
      "name": "Data Scraper",
      "Id": "abcdefghijklmnop",
      "resource_count": 15
    }
  ]
}
```

#### Data leakage empty

```json
{
  "data_leakage": []
}
```

#### Potential threat insights

```json
{
  "potential_threat": [
    {
      "extension_id": 100,
      "name": "Sample Extension",
      "Id": "abcdefghijklmnopqrstuvwxyz",
      "resource_count": 10
    }
  ]
}
```

#### Potential threat empty

```json
{
  "potential_threat": []
}
```

#### Dangerous insights

```json
{
  "dangerous": [
    {
      "extension_id": 100,
      "name": "Sample Extension",
      "Id": "abcdefghijklmnopqrstuvwxyz",
      "resource_count": 8
    }
  ]
}
```

#### Dangerous empty

```json
{
  "dangerous": []
}
```

#### Recent extensions

```json
{
  "recent_extensions": [
    {
      "extension_id": 101,
      "detected_time": 1741651200000,
      "name": "Recently Detected Extension",
      "Id": "mnopqrstuvwxyzabcdefghijkl",
      "resource_count": 3
    }
  ]
}
```

#### Recent extensions empty

```json
{
  "recent_extensions": []
}
```

#### Dangerous permissions summary

```json
{
  "dangerous_permission": [
    {
      "name": "webRequest",
      "id": 105,
      "extension_ids": [
        100,
        101
      ]
    },
    {
      "name": "nativeMessaging",
      "id": 106,
      "extension_ids": [
        104
      ]
    }
  ],
  "total_extensions": "50"
}
```

#### Dangerous permissions empty

```json
{
  "dangerous_permission": [],
  "total_extensions": "31"
}
```

### HTTP 401

#### Unauthorized

```json
{
  "errorCode": "UNAUTHORIZED",
  "errorMsg": "You are not authorized to perform this action"
}
```

### HTTP 403

#### Forbidden

```json
{
  "errorCode": "FORBIDDEN",
  "errorMsg": "You do not have permission to access this resource"
}
```

### HTTP 429

#### Rate limit exceeded

```json
{
  "errorCode": "RATE_LIMIT_EXCEEDED",
  "errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
```

### HTTP 500

#### Server error

```json
{
  "error_description": "Internal Server error, Please try again in a moment.",
  "error_code": "COM0004"
}
```

## Rate Limits

![](https://www.zohowebstatic.com/sites/zweb/images/people/ico-help.png)

**Duration:** 1 minute | **Threshold:** 60 | **Lock period:** 5 minutes

Duration - Time window for the threshold.  
Threshold - Number of API calls allowed within the specified duration.  
Lock Period - Wait time before consecutive API requests.