# 获取 Threat Protection 策略 (/zh/api-reference/endpoint/threat-protection)

<!-- agent-signals: reading_time_min: 1 · est_tokens: 853 · updated: 2026-07-30 -->
Related: [Search（搜索）](/zh/api-reference/endpoint/search.md), [搜索反馈](/zh/api-reference/endpoint/search-feedback.md), [Scrape](/zh/api-reference/endpoint/scrape.md), [批量抓取](/zh/api-reference/endpoint/batch-scrape.md), [获取批量抓取状态](/zh/api-reference/endpoint/batch-scrape-get.md), [取消批量抓取](/zh/api-reference/endpoint/batch-scrape-delete.md)

返回你的组织当前生效的 [threat protection](/zh/features/threat-protection) 策略。此功能仅适用于 Enterprise 版；需要先为你的团队启用该功能。

`GET /team/threat-protection`

获取团队的威胁防护策略

## OpenAPI

```json
{
  "security": [
    {
      "bearerAuth": []
    }
  ],
  "responses": {
    "200": {
      "content": {
        "application/json": {
          "schema": {
            "properties": {
              "data": {
                "properties": {
                  "allowRequestOverrides": {
                    "description": "单个请求是否可以传入 `threatProtection` 对象。为 false 时，此类请求会被拒绝，并返回 403。",
                    "example": true,
                    "type": "boolean"
                  },
                  "blacklist": {
                    "description": "精确域名或通配模式（例如 `*.example.com`）将始终被封禁，无需调用分类器。",
                    "example": [
                      "*.risky.example"
                    ],
                    "items": {
                      "type": "string"
                    },
                    "type": "array"
                  },
                  "blockedTlds": {
                    "description": "要直接封禁的顶级域名，需使用小写且不带前导点。",
                    "example": [
                      "zip"
                    ],
                    "items": {
                      "type": "string"
                    },
                    "type": "array"
                  },
                  "configured": {
                    "description": "该组织是否已保存策略（而非使用默认值）。",
                    "example": true,
                    "type": "boolean"
                  },
                  "failurePolicy": {
                    "description": "分类器不可达时的行为：`closed` 时封禁（默认值），`open` 时允许。",
                    "enum": [
                      "open",
                      "closed"
                    ],
                    "example": "closed",
                    "type": "string"
                  },
                  "mode": {
                    "description": "威胁防护模式。`off` 禁用检查；`normal` 使用 Google Web Risk 检查 URL（每扫描 1 个 URL 额外消耗 2 个额度）。",
                    "enum": [
                      "off",
                      "normal"
                    ],
                    "example": "normal",
                    "type": "string"
                  },
                  "riskScoreThreshold": {
                    "description": "归一化分数（0-100）达到或超过该值时，分类器判定结果会被封禁。值越低，规则越严格。",
                    "example": 75,
                    "maximum": 100,
                    "minimum": 0,
                    "type": "integer"
                  },
                  "updatedAt": {
                    "format": "date-time",
                    "nullable": true,
                    "type": "string"
                  },
                  "whitelist": {
                    "description": "精确域名或通配模式将始终被允许，其优先级高于其他所有规则。",
                    "example": [
                      "*.trusted.example"
                    ],
                    "items": {
                      "type": "string"
                    },
                    "type": "array"
                  }
                },
                "type": "object"
              },
              "success": {
                "example": true,
                "type": "boolean"
              }
            },
            "type": "object"
          }
        }
      },
      "description": "团队所属组织当前生效的威胁防护策略。"
    },
    "403": {
      "description": "此团队未启用威胁防护，或者在不允许覆盖时发送了请求覆盖。"
    }
  }
}
```
