---
title: EASM Blocklist
slug: neurons-api/easm-blocklist
createdAt: 2026-08-19T08:34:10.055Z
---

The Ivanti Neurons External Attack Surface Management feature crawls seed domains that customers provide.

This API lets customers specify seed domains that should not be allowed.

### Required Header Parameters

| Name          | Type       | Description                                                                                                         |
| ------------- | ---------- | ------------------------------------------------------------------------------------------------------------------- |
| Authorization | Authheader | Use the `Bearer <access-token>` value determined during the [Authentication](docId\:g63kPQj5_TALr1zpNkeeN) process. |

### Request Body Parameters

### GET /api/v1/easm/Blocklist

Returns the complete list of configured excluded/blocked domains.

| Name        | Type   | Description                              |
| ----------- | ------ | ---------------------------------------- |
| api-version | String | v1 is the current supported API version. |

### Response Output Example

```bash
 [
  {
    "domain": "AF.mil"
  },
  {
    "domain": "ATF.gov"
  },
  {
    "domain": "Army.mil"
  },
  {
    "domain": "CIA.gov"
  },
  {
    "domain": "Cdc.gov"
  }
]
```

### POST /api/v1/easm/Blocklist

Adds a custom URL to the existing exclusion list.

| Name         | Type   | Description                              |
| ------------ | ------ | ---------------------------------------- |
| api-version  | String | v1 is the current supported API version. |
| Request body | JSON   |                                          |

```bash
}
```

```bash
"domain": "AF.mil"
```

```bash
{
```

### Response Output Example

```bash
AF.mil
```

### PUT /api/v1/easm/Blocklist/

Edit or update an existing domain URL.

| Name        | Type           | Description                                   |
| ----------- | -------------- | --------------------------------------------- |
| domain      | String (path)  | JSON \{<br />"domain": "topsecret.gov"<br />} |
| api-version | String (query) | v1 is the current supported API version.      |

### Response Output Example

```bash
{
  "domain": "topsecret.gov"
}
```

### DELETE /api/v1/easm/Blocklist/

Delete an existing domain from the excluded list.

| Name        | Type           | Description                              |
| ----------- | -------------- | ---------------------------------------- |
| domain      | String (path)  | "topsecret.gov"                          |
| api-version | String (query) | v1 is the current supported API version. |

### Response Output Example

```bash
Status Code: 200 OK
```