ORBIT

Shield API 参考

Shield API。

共 20 个端点,其中 9 个只读。每一个都同时是 orbit 命令行中的命令、SDK 中的方法和 MCP 服务器上的工具。

01

sites

端点	权限	参数	CLI · MCP 工具
`GET /cdn/sites/{id}/threats` Threat intelligence for a site: share of traffic by risk band, top ASNs / countries / reasons, timeline (aggregates only)	只读	`id` integer `?range` 24h \| 7d	`orbit shield sites threats <id>` `shield_sites_threats`
`GET /cdn/sites` List Shield sites (proxied hostnames)	只读	`?limit` integer `?offset` integer	`orbit shield sites list` `shield_sites_list`
`POST /cdn/sites` Onboard a hostname by CNAME (DNS stays at your provider)	读写	请求体: `hostname`* string, `origin`* string, `origin_scheme` http \| https \| strict, `origin_host_header` boolean, `service_id` integer	`orbit shield sites create` `shield_sites_create`
`GET /cdn/sites/{id}` Get a site	只读	`id` integer	`orbit shield sites get <id>` `shield_sites_get`
`PATCH /cdn/sites/{id}` Update site settings (partial)	读写	`id` integer 请求体: `waf` object, `cache_ttl` integer, `cache_mode` all \| static \| origin, `cache_html_ttl` integer, `force_https` boolean, `rate_limit` integer, `origin_scheme` http \| https \| strict, `origin_host_header` boolean, `cert_pem` string, `key_pem` string, `waiting_room` object, `under_attack` boolean, `bot_fight` boolean, `sense` object	`orbit shield sites patch <id>` `shield_sites_patch`
`DELETE /cdn/sites/{id}` Remove a CNAME-mode site (zone-hosted sites are removed by un-proxying their record)	读写	`id` integer	`orbit shield sites delete <id>` `shield_sites_delete`
`PUT /cdn/sites/{id}/origin` Point a hostname at a Pages project, an Orbit Link tunnel, or back at its own origin	读写	`id` integer 请求体: `pages_project_id` integer, `link_tunnel_id` integer	`orbit shield sites origin <id>` `shield_sites_origin`
`POST /cdn/sites/{id}/verify` Check the CNAMEs in public DNS; request the certificate once seen	读写	`id` integer	`orbit shield sites verify <id>` `shield_sites_verify`
`POST /cdn/sites/{id}/purge` Purge cache (everything, or given paths)	读写	`id` integer 请求体: `urls` string[]	`orbit shield sites purge <id>` `shield_sites_purge`
`POST /cdn/sites/{id}/origin-certificate` Issue an Orbit Origin CA certificate for the origin	读写	`id` integer	`orbit shield sites origincert <id>` `shield_sites_origincert`
`POST /cdn/sites/{id}/acme` Start automated Let's Encrypt issuance (dns-01)	读写	`id` integer	`orbit shield sites acme <id>` `shield_sites_acme`
`GET /cdn/sites/{id}/analytics` Traffic analytics: exact per-minute counters plus top lists and latency from the sampled logs	只读	`id` integer `?range` 1h \| 24h \| 7d	`orbit shield sites analytics <id>` `shield_sites_analytics`
`GET /cdn/sites/{id}/waf/hits` Which firewall rules have been matching, with one example path each	只读	`id` integer `?range` 15m \| 1h \| 24h \| 7d	`orbit shield sites wafhits <id>` `shield_sites_wafhits`

02

onboard

端点	权限	参数	CLI · MCP 工具
`GET /onboard/recommend` Which onboarding modes fit a hostname, best first	只读	`?hostname` string	`orbit shield onboard recommend` `shield_onboard_recommend`

03

logs

端点	权限	参数	CLI · MCP 工具
`GET /cdn/sites/{id}/logs` Request logs (sampled), newest first, cursor-paged; format=csv exports up to 10 000 rows	只读	`id` integer `?since` string `?until` string `?ray` string `?ip` string `?path` string `?status` string `?action` pass \| netrule_block \| waf \| challenge \| ratelimit \| waiting \| origin_error \| redirect `?cc` string `?limit` integer `?cursor` string `?format` json \| csv	`orbit shield logs list <id>` `shield_logs_list`
`GET /cdn/sites/{id}/logs/{ray}` One request by Ray ID, with every header	只读	`id` integer `ray` string	`orbit shield logs get <id> <ray>` `shield_logs_get`

04

rules

端点	权限	参数	CLI · MCP 工具
`GET /security/rules` List security rules	只读	`?limit` integer `?offset` integer `?site_id` integer `?zone_id` integer	`orbit shield rules list` `shield_rules_list`
`POST /security/rules` Add a rule for a site or a whole zone	读写	请求体: `site_id` integer, `zone_id` integer, `field`* country \| asn \| ip \| isp, `op`* in \| not_in, `value`* string, `action`* block \| allow \| challenge \| ratelimit, `seq` integer, `note` string	`orbit shield rules create` `shield_rules_create`
`PATCH /security/rules/{id}` Enable/disable a rule	读写	`id` integer 请求体: `enabled`* boolean	`orbit shield rules patch <id>` `shield_rules_patch`
`DELETE /security/rules/{id}` Delete a rule	读写	`id` integer	`orbit shield rules delete <id>` `shield_rules_delete`

继续

相关文档

账户 API 参考

Orbit API 中账户的全部 10 个端点:方法与路径、所需令牌权限、参数,以及对应的命令行命令与 MCP 工具。

组织 API 参考

Orbit API 中组织的全部 10 个端点:方法与路径、所需令牌权限、参数,以及对应的命令行命令与 MCP 工具。

服务 API 参考

Orbit API 中服务的全部 15 个端点:方法与路径、所需令牌权限、参数,以及对应的命令行命令与 MCP 工具。

← 全部文档