Retrieves a summary count of extensions with dangerous permissions and the total extensions installed across managed devices.
get /bsp/api/v1/bmp/permissions/summary
https://{serverurl}/bsp/api/v1/bmp/permissions/summary
Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52
curl --request GET \
--url https://appdomains/bsp/api/v1/bmp/permissions/summary \
--header 'Accept: application/json' \
--header 'Authorization: Zoho-oauthtoken d92d4xxxxxxxxxxxxx15f52'Summary of extensions with dangerous permissions
Count of extensions that have dangerous permissions (such as webRequest, nativeMessaging, or proxy)
Total number of extensions installed across managed devices
Unauthorized error code: credentials missing, expired, or invalid
Authentication failure reason
Error code indicating insufficient permissions
Message indicating insufficient privileges to access this resource
Rate limit error code returned when the API call reached threshold
Rate limit exceeded message with retry guidance
Returned when an unexpected server error occurs
Message describing the internal server error
Error code identifying the type of server error
Summary showing 12 extensions with dangerous permissions out of 150 total
{
"dangerous_permission": 12,
"total_extensions": 150
}
No extensions with dangerous permissions found
{
"dangerous_permission": 0,
"total_extensions": 45
}
Authentication credentials are missing or invalid
{
"errorCode": "UNAUTHORIZED",
"errorMsg": "You are not authorized to perform this action"
}
The user does not have the required permissions to perform this action
{
"errorCode": "FORBIDDEN",
"errorMsg": "You do not have permission to access this resource"
}
Too many API requests have been made
{
"errorCode": "RATE_LIMIT_EXCEEDED",
"errorMsg": "You have exceeded the maximum number of API calls. Please try again later."
}
An unexpected server error occurred
{
"error_description": "Internal Server error, Please try again in a moment.",
"error_code": "COM0004"
}
![]()
Duration: 1 minute | Threshold: 60 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.