Creates a new application rule based on vendor name, product name, executable file hash, or COM component. The newly created rule can then be added to any application group for allow or block enforcement.
post /dcapi/appctrl/customrule
https://{server-hostname}:8383/dcapi/appctrl/customrule
AppControl.CREATECopied!
Authorization: d92d4xxxxxxxxxxxxx15f52
Rule type (1=Vendor, 2=Product, 3=Executable, 4=FileHash, 20=Component)
Verification status (1=verified, 0=unverified)
Platform ID (1=Windows, 2=Mac)
Name of the software vendor
Name of the software product. Required when appRuleType is 2 (Product).
Name of the executable file (e.g. myapp.exe). Required when appRuleType is 3 (Executable) or 4 (FileHash).
SHA-256 hash of the file. Required when appRuleType is 4 (FileHash).
Refers to the type of hash (1=SHA-256, 2=CDHash)
curl --request POST \
--url https://appdomain/dcapi/appctrl/customrule \
--header 'Authorization: d92d4xxxxxxxxxxxxx15f52' \
--header 'content-type: SOME_STRING_VALUE' \
--data '{"appRuleType":"1","isVerified":true,"platformID":"1","vendorName":"Adobe Systems"}'Create a vendor-based rule
{
"appRuleType": "1",
"isVerified": true,
"platformID": "1",
"vendorName": "Adobe Systems"
}
Create a Product-based rule
{
"appRuleType": 2,
"isVerified": false,
"platformID": 1,
"vendorName": "Google",
"productName": "glc"
}
Create a Verified Executable rule
{
"appRuleType": 3,
"fileName": "dfsgsdfydhgfd",
"platformID": 1,
"vendorName": "fsdzfgdfsgrdgf",
"productName": "fsdgfdghfhfd"
}
Create a file hash rule for a Windows executable
{
"appRuleType": "4",
"fileName": "myapp.exe",
"sha256Hash": "a1b2c3d4e5f67890abcdef1234567890abcdef1234567890abcdef1234567890",
"isVerified": false,
"platformID": "1",
"hashType": 1
}
Rule type ID (1=Vendor, 2=Product, 3=Executable, 4=FileHash, 20=Component)
Unique identifier for the created rule
Display name of the created rule
Detailed attributes of the created rule — structure varies by appRuleType
Name of the executable file (e.g. myapp.exe). Present when appRuleType is 3 (Executable) or 4 (FileHash).
SHA-256 hash of the file. Present when appRuleType is 4 (FileHash).
Unauthorized error code returned when authentication credentials are missing, expired, or invalid (authentication=required)
Authentication failure reason
Successfully created custom rule
{
"appRuleType": 4,
"appRuleID": 700,
"ruleDetails": {
"fileName": "myapp.exe",
"sha256Hash": "a1b2c3d4e5f67890abcdef1234567890abcdef1234567890abcdef1234567890"
},
"appRuleName": "myapp.exe"
}
Authentication credentials missing or invalid
{
"errorMessage": "Authentication credentials are missing or invalid",
"errorCode": "UNAUTHORIZED"
}
![]()
Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes
Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.
© 2026, Zoho Corporation Pvt. Ltd. All Rights Reserved.