Update platform-global SDK settings

Developing

PUT

/ui-extensions/settings

Last modified:2026-08-19 13:50:00

OperationId:updateUiExtensionSettings

Super-admin scopes only ('Super User', 'Admin Super User') — approved-cdn-origins decides which CDNs may ship JavaScript into every session on every domain. PER-FIELD merge: a field absent from the payload keeps its stored value; a field that is sent replaces that list entirely (an explicit [] clears it — for approved-cdn-origins that means 'block every CDN'). List members are opaque string ids that may not contain commas.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/jsonRequired

Examples

Responses

🟢202Accepted

application/json

Accepted — published to the cluster. The body is the uniform acknowledgement envelope — {code, message}, plus warnings when the write raised any. No identifier is returned: writes are keyed on what the caller named.

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

Request Example

Shell

JavaScript

Java

Swift

curl --location --request PUT 'https://awqacore01.crexendocloud.com/ns-api/v2/ui-extensions/settings' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "disabled-zones": [
        "string"
    ],
    "disabled-capabilities": [
        "string"
    ],
    "api-read-deny-resources": [
        "string"
    ],
    "api-write-deny-resources": [
        "string"
    ],
    "approved-cdn-origins": [
        "string"
    ],
    "analysis-settings": {},
    "analysis-denylist": {},
    "analysis-rule-policy": {}
}'

Response Example

202 - Example 1

{
    "code": 0,
    "message": "string"
}

Modified at 2026-08-19 13:50:00

Read platform-global SDK settings

Re-judge stored versions against the current ruleset