# Alibaba Cloud Application protection API

> Alibaba Cloud Application protection API on Apizie: 3 endpoints (Queries the attack prevention counters, Queries the details of attack information on the attack alert page, version) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:aliyun-sasrasp/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:aliyun-sasrasp`
- Category: Cloud
- Status: byok
- Source: https://api.alibabacloud.com/product/sasrasp
- Page: https://zieapi.vercel.app/api/cloud/aliyun-sasrasp
- OpenAPI: https://zieapi.vercel.app/api/cloud/aliyun-sasrasp/openapi.json

Alibaba Cloud OpenAPI for Application protection (sasrasp, version 2024-07-27). Calls are signed with ACS3-HMAC-SHA256 using your AccessKey ID and secret.

## Endpoints

### Queries the attack prevention counters
`POST https://zieapi.vercel.app/v1/cloud:aliyun-sasrasp/describe-attack-protection-count` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://sasrasp.ap-southeast-1.aliyuncs.com |
| StartTimestamp | integer | yes | The start time, in milliseconds (UNIX timestamp) |
| EndTimestamp | integer | yes | The end time, in milliseconds (UNIX timestamp) |
| AgentType | string | no | The type of agent to query |

### Queries the details of attack information on the attack alert page
`POST https://zieapi.vercel.app/v1/cloud:aliyun-sasrasp/describe-attacks` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://sasrasp.ap-southeast-1.aliyuncs.com |
| Lang | string | no | The language type of the request and response messages. Valid values: zh: Chinese. en: English |
| Region | string | no | The region. Only cn-hangzhou is supported |
| AgentType | string | no | The type of the agent to retrieve. Only sas is supported |
| ApplicationId | string | no | The application ID. You can call the [DescribeSasApplications](~~DescribeSasApplications~~) operation to obtain this parameter |
| StartTimestamp | integer | yes | The start time. The value is a UNIX timestamp in milliseconds |
| EndTimestamp | integer | yes | The end time. The value is a UNIX timestamp in milliseconds |
| PageNumber | integer | no | The page number. Default value: 1 |
| PageSize | integer | no | The number of entries per page. Default value: 10 |
| UnionId | string | no | The unionId (employee ID) of the creator |
| AttackUrl | string | no | The request URL |
| AttackType | string | no | The attack type. Valid values: file_read: Arbitrary file read. sql: SQL injection. xxe: XML external entity (XXE) injection. ssrf:… |
| HandlerType | string | no | The handling method. Valid values: monitor: Monitor. block: Block |
| Severity | string | no | The severity level of the attack. Valid values: low: Low. medium: Medium. high: High |
| Hostname | string | no | The hostname |
| Ip | string | no | The IP address in the alert event |
| AttackHostId | string | no | The ID of the attacked host |
| RaspType | string | no | The application language. Valid values: java: Java. php: PHP |
| Pid | string | no | The process ID |
| Remote | string | no | The IP address of the attacker |
| HandleStatus | integer | no | The handling status. Valid values: 0: Unhandled. 1: Handled |

### version
`POST https://zieapi.vercel.app/v1/cloud:aliyun-sasrasp/version` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://sasrasp.ap-southeast-1.aliyuncs.com |

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:aliyun-sasrasp/describe-attack-protection-count" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Alibaba Cloud Application protection API?
Create a free Apizie key, then send POST https://zieapi.vercel.app/v1/cloud:aliyun-sasrasp/describe-attack-protection-count with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Alibaba Cloud Application protection API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Alibaba Cloud Application protection itself also needs your own key from aliyuncs.com.

### Can AI agents use the Alibaba Cloud Application protection API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:aliyun-sasrasp.

### What is the status of the Alibaba Cloud Application protection API?
Needs your own provider key (bring your own key)