# Alibaba Cloud Agent Security Center API

> Alibaba Cloud Agent Security Center API on Apizie: 16 endpoints (Creates an AI Red Teaming scan target (agent or model) and saves its connection configuration for subsequent…, Initiates batch detection for user-defined skills, Initiates a security scan task against a scan target that has passed connectivity verification. After the…, Deletes a specified scan target by TargetId in AI Red Teaming. The target is physically deleted and cannot…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:aliyun-aisc/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:aliyun-aisc`
- Category: Cloud
- Status: byok
- Source: https://api.alibabacloud.com/product/aisc
- Page: https://zieapi.vercel.app/api/cloud/aliyun-aisc
- OpenAPI: https://zieapi.vercel.app/api/cloud/aliyun-aisc/openapi.json

Alibaba Cloud OpenAPI for Agent Security Center (aisc, version 2026-01-01). Calls are signed with ACS3-HMAC-SHA256 using your AccessKey ID and secret.

## Endpoints

### Creates an AI Red Teaming scan target (agent or model) and saves its connection configuration for subsequent…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/create-attack-target` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| TargetName | string | yes | The display name of the scan target, used for list display and filtering. Use a distinguishable name within the same tenant |
| TargetType | string | yes | The type of the scan target, which determines the sampling dimension for scan tasks. Valid values: agent: agent-type samples. model:… |
| ConnectionMethod | string | yes | The connection protocol type for the target service. The system selects the corresponding protocol adapter based on this value |
| Description | string | no | An optional description of the scan target usage |
| Endpoint | string | yes | The HTTP or HTTPS endpoint address of the target model service. When ConnectionMethod is set to enterprise_relay, this value is ignored… |
| ApiKey | string | yes | The API key for the target model service, used to authenticate with the endpoint. The key is encrypted and stored after submission.… |
| ModelName | string | no | The name of the target model. When ConnectionMethod is set to openai, specify the model ID under the OpenAI compatible protocol. When… |
| ConnectionConfig | string | no | The advanced connection configuration in JSON string format. Common fields: authType (authentication type. custom_header: custom request… |
| Provider | string | no | The business label of the model or agent provider, used for UI filtering and form display. This is decoupled from ConnectionMethod… |

### Initiates batch detection for user-defined skills
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/create-skill-file-check` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| Files | string | no | The file information (JSON-encoded) |
| Source | string | no | The upload source. If left empty, user_upload is used by default. Security operations agents use sec_ops_agent |

### Initiates a security scan task against a scan target that has passed connectivity verification. After the…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/create-target-scan-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| TargetId | string | yes | The unique identifier of the scan target. The target must have passed connectivity verification (verifyStatus=verified). Otherwise, a 400… |
| SampleLevel | integer | no | The detection intensity. The backend derives the corresponding technique level based on this value. If this parameter is not specified,… |
| Lang | string | no | The language filter for samples, in locale format (such as zh_CN or en_US, which is internally normalized to zh or en). If this parameter… |

### Deletes a specified scan target by TargetId in AI Red Teaming. The target is physically deleted and cannot…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/delete-attack-target` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| TargetId | string | yes | The unique identifier of the scan target. This is the TargetId returned by CreateAttackTarget or ListAttackTargets. If the target does not… |

### Physically deletes a specified scan task by ScannerTaskId in AI Red Teaming
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/delete-scanner-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| ScannerTaskId | string | yes | The unique identifier of the scan task. This is the TaskId returned by CreateTargetScanTask or the ScannerTaskId returned by… |

### Generates a one-time installation script for a scan target of the enterprise_relay type in AI Red Teaming.…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/generate-relay-poller-script` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| TargetId | string | no | The unique identifier of the scan target. The target must use the enterprise_relay connection method (see CreateAttackTarget). Otherwise,… |
| Platform | string | no | The target platform in the "operating system-architecture" format. Only linux-amd64 and linux-arm64 are supported. Compatible architecture… |

### Queries the details of a scan target by TargetId for AI Red Teaming, including connection configuration and…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/get-attack-target` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| TargetId | string | yes | The unique identifier of the scan target. If the target does not exist or belongs to another tenant, a 400 error is returned to avoid… |

### Retrieves a temporary download URL for the attack hit data (hits.csv) of a specified scan task in AI Red…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/get-scanner-task-hit-data-url` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| ScannerTaskId | string | no | The unique identifier of the scan task. This is the TaskId returned by CreateTargetScanTask or the ScannerTaskId returned by… |

### Retrieves a temporary download URL for the HTML result report of an AI Red Teaming scan task. The URL is…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/get-scanner-task-result-html-url` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| ScannerTaskId | string | yes | The unique identifier of the scan task. This is the TaskId returned by CreateTargetScanTask or the ScannerTaskId returned by… |

### Retrieves a list of agent risk events
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/list-aiagent-event` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| PageSize | integer | no | The number of entries per page |
| CurrentPage | integer | no | The current page number |
| RiskName | string | no | The risk name. Fuzzy match is supported |
| AppId | string | no | The ID of the agent application |
| Source | string | no | The event source. Valid values: cspm aiguard SASE SAS Agent-Runtime-Guard |
| Status | string | no | The event status. Valid values: unhandled: Pending. handling: Being processed. fixed: Fixed. ignored: Ignored. rescanned: Rescanned |
| RiskLevel | string | no | The risk level of the check item to query. Valid values: high: High. medium: Medium. low: Low |
| AppName | string | no | Filters the agent list by application name |
| AssetName | string | no | The asset name |
| Lang | string | no | The language of the response. Valid values: zh (default): Chinese. en: English |
| AssetType | string | no | The type of the agent asset. Valid values: rag internet datasets tool model skill app identity |
| StatusList | string | no | The list of statuses (JSON-encoded) |
| Vendor | string | no | The cloud asset vendor. Valid values: ** DIFY**: DIFY ** BAILIAN**: BAILIAN ** VOLCAI**: VOLCAI ** AGENTRUN**: AGENTRUN ** PAI**: PAI **… |
| InfraInstanceId | string | no | The infrastructure instance ID |
| InfraName | string | no | The infrastructure name |
| InfraRegionId | string | no | The infrastructure region |
| OrderBy | string | no | The field by which to sort results. Currently, only sorting by check time is supported |
| Order | string | no | The sort order. Valid values: asc indicates ascending order. desc indicates descending order |
| ResourceDirectoryAccountId | integer | no | The ID of the member accounts in the resource directory (Alibaba Cloud account). Call the… |

### Queries the list of scan targets for AI Red Teaming. This operation supports multi-dimensional filtering and…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/list-attack-targets` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| PageNumber | integer | yes | The page number. Pages start from 1. Values less than 1 are normalized to 1 |
| PageSize | integer | yes | The number of entries per page. Default value: 10. Maximum value: 100. Values greater than 100 are clamped to 100. Values less than 1… |
| TargetName | string | no | Filters targets by name using fuzzy match (substring match). If this parameter is not specified, all targets are returned |
| Provider | string | no | Filters targets by the exact business label of the model or agent provider. This parameter is decoupled from ConnectionMethod (technical… |
| LastScanStatus | string | no | Filters targets by the status of the most recent scan task |
| TargetType | string | no | Filters targets by the exact scan target type |
| RiskLevel | string | no | Filters targets by the risk level derived from the most recent completed scan task. Targets that have never been scanned do not have a… |
| SortField | string | no | The field used for sorting. Only the following three aggregate fields are supported. Sorting is performed in memory. If this parameter is… |
| SortOrder | string | no | The sort order. Targets with null aggregate values are always placed last regardless of the sort order |
| FirstScanTimeStart | string | no | The lower bound (inclusive) of the first scan time range. The value is a UNIX timestamp in milliseconds |
| FirstScanTimeEnd | string | no | The upper bound (inclusive) of the first scan time range. The value is a UNIX timestamp in milliseconds |
| LastScanTimeStart | string | no | The lower bound (inclusive) of the last scan time range. The value is a UNIX timestamp in milliseconds |
| LastScanTimeEnd | string | no | The upper bound (inclusive) of the last scan time range. The value is a UNIX timestamp in milliseconds |

### Queries scan tasks under a specified scan target by paged query for AI Red Teaming. Supports filtering by…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/list-scan-tasks-by-target` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| TargetId | string | yes | The unique identifier of the scan target. Only tasks under this target are queried. If the target does not exist or does not belong to the… |
| PageSize | string | yes | The number of entries per page. Default value: 10. Maximum value: 100. Values greater than 100 are clamped to 100. Values less than 1… |
| PageNumber | string | yes | The page number. Pages start from page 1. Values less than 1 are normalized to 1 |
| SampleLevel | string | no | Filters by detection intensity. If this parameter is not specified, no filtering by intensity is applied |
| TaskStatus | string | no | Filters by task status. If this parameter is not specified, tasks in all statuses are returned |
| ScanType | string | no | Filters by scan type. If this parameter is not specified, tasks of all scan types are returned |

### Get subtask information
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/list-sub-tasks` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| RootTaskId | string | no | The main task ID returned upon task submission |
| TaskType | string | no | The task type |
| CurrentPage | integer | no | The current page number |
| PageSize | integer | no | The page size |

### Stops (cancels) an in-progress scan task for AI Red Teaming. Calling this operation on a task that is…
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/stop-scanner-task` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| ScannerTaskId | string | yes | The unique identifier of the scan task. This is the TaskId returned by CreateTargetScanTask or the ScannerTaskId returned by… |

### Tests the network connectivity and authentication validity of an AI Red Teaming target
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/test-connectivity` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |
| TargetId | string | no | The unique identifier of the attack target. If specified, the system reads Endpoint, ApiKey, ModelName, ConnectionMethod, and… |
| Endpoint | string | no | The HTTP or HTTPS endpoint address of the target model service. This parameter is required if TargetId is empty |
| ApiKey | string | no | The API key for the target model service, used to authenticate with the Endpoint. If TargetId is specified, the system reads the key from… |
| ModelName | string | no | The name of the target model. If ConnectionMethod is set to openai, specify the model ID under the OpenAI compatible protocol. If… |
| ConnectionMethod | string | no | The connection protocol type of the target service. The system selects the corresponding protocol adapter to initiate the test based on… |
| ConnectionConfig | string | no | The advanced connection configuration in JSON string format. Common fields: authType (authentication type. custom_header indicates custom… |
| CheckId | string | no | The tracking identifier of the connectivity test. Do not specify this parameter for the first call. The system generates and returns it in… |

### version
`POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/version` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| endpoint | string | no | Regional endpoint, for example https://aisc.ap-southeast-1.aliyuncs.com |

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:aliyun-aisc/create-attack-target" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Alibaba Cloud Agent Security Center API?
Create a free Apizie key, then send POST https://zieapi.vercel.app/v1/cloud:aliyun-aisc/create-attack-target with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Alibaba Cloud Agent Security Center API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Alibaba Cloud Agent Security Center itself also needs your own key from aliyuncs.com.

### Can AI agents use the Alibaba Cloud Agent Security Center API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:aliyun-aisc.

### What is the status of the Alibaba Cloud Agent Security Center API?
Needs your own provider key (bring your own key)