---
title: "List Firewall Rules (Trusted Sources) for a Database Cluster"
method: GET
path: "/v2/databases/{database_cluster_uuid}/firewall"
tags: ["DigitalOcean-public.v2-new_Databases"]
---

# List Firewall Rules (Trusted Sources) for a Database Cluster

`GET /v2/databases/{database_cluster_uuid}/firewall`

To list all of a database cluster's firewall rules (known as "trusted sources" in the control panel), send a GET request to `/v2/databases/$DATABASE_ID/firewall`.
The result will be a JSON object with a `rules` key.

## Path parameters

- `database_cluster_uuid` string, uuid, required

## Response `200`

A JSON object with a key of `rules`.

- object
  - `rules` FirewallRule[]
    - `uuid` string — A unique ID for the firewall rule itself.
    - `cluster_uuid` string — A unique ID for the database cluster to which the rule is applied.
    - `type` 'droplet' | 'k8s' | 'ip_addr' | 'tag' | 'app', required — The type of resource that the firewall rule allows to access the database cluster.
    - `value` string, required — The ID of the specific resource, the name of a tag applied to a group of resources, or the IP address that the firewall rule allows to access the database cluster.
    - `created_at` string, date-time — A time value given in ISO8601 combined date and time format that represents when the firewall rule was created.

## Other responses

- `401` — Authentication failed due to invalid credentials.
- `404` — The resource was not found.
- `429` — The API rate limit has been exceeded.
- `500` — There was a server error.
- `default` — There was an unexpected error.

---

[API](https://skmtc.net/digitalocean/apis/digitalocean-api.md) · [All operations](https://skmtc.net/digitalocean/apis/digitalocean-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/digitalocean/digitalocean-api/versions/cb3bf9b21459/schema)