---
title: "Partial Update Extra Host"
method: PATCH
path: "/targets/{target_id}/assets/{id}/"
tags: ["Extra Hosts"]
---

# Partial Update Extra Host

`PATCH /targets/{target_id}/assets/{id}/`

## Path parameters

- `id` string, required — A unique Base58 value identifying this object.
- `target_id` string, required

## Query parameters

- `include` 'target'

## Request body

- PatchedAsset — Model deals with setting verified to False if host changes.
  - `id` string — A unique Base58 value identifying this object.
  - `name` string — Name of the target or extra host. The maximum length is 255 characters.
  - `desc` string, nullable — Description of the target.
  - `stack` Framework[] — Technologies identified in the target during scans. The scanning engine uses them to fine-tune vulnerability tests and improve the explanation of how to fix vulnerabilities.
    - `id` string, required — A unique Base58 value identifying this object.
    - `name` string, required — Name of the technology. For example, "PHP, "SQLite", "Python", "Apache", or "Wordpress". The maximum lenght is 255 characters.
    - `desc` string, nullable, required — Description of the technology. Defaults to "".
  - `verified` boolean — If true, the domain is verified. Read-only.
  - `verification_token` string, uuid — Token used to verify the domain. Read-only.
  - `verification_date` string, date-time — Date and time of the verification of the domain, in ISO 8601 UTC format. For example, "2023-08-09T13:27:43.8208302". Read-only.
  - `verification_method` 'file' | 'back_office' | 'existing_domain' | 'dns_txt' | 'dns' | 'dns_cname' | 'meta_tag' | 'whitelist' | 'email' | 'aws_route53' | 'cloudflare' | 'waved' | 'akamai' — Method used in the verification of the domain: (Read-only) * `file` - Verifies the domain against a text file in the root directory of the website. Learn more in [this article](https://help.probely.com/en/articles/3289281-how-to-verify-the-ownership-of-a-target-using-a-txt-file). * `back_office` - Automatically set if manually verified in the back-office. Read-only. * `existing_domain` - Automatically set if the upper-level domain is verified. For example, "my.example.com" is automatically verified if "example.com" is verified. Read-only. * `dns_txt` - Verifies the domain against a TXT record in the Domain Name System (DNS). Learn more in [this article](https://help.probely.com/en/articles/3285635-how-to-verify-the-ownership-of-a-target-using-dns-txt-records). * `dns` - Same as `dns_txt`. * `dns_cname` - Verifies the domain against a CNAME record in the Domain Name System (DNS). Learn more in [this article](https://help.probely.com/en/articles/5642359-how-to-verify-the-ownership-of-a-target-using-dns-cname-records). * `meta_tag` - Verifies the domain against a meta tag in the index page of the website. Learn more in [this article](https://help.probely.com/en/articles/5642393-how-to-verify-the-ownership-of-a-target-using-a-meta-tag). * `whitelist` - Automatically verifies if the domain is in the whitelist * `email` - Automatically verifies a domain if the user's email is in the same domain as the target * `aws_route53` - Automatically verifies a domain if the hostname exists as an AWS Route53 Zone. * `cloudflare` - Automatically verifies a domain if the host name exists and is verified as a CloudflareZone. * `waved` - Automatically verifies a domain if there is a waver agreement. * `akamai` - Automatically verifies a domain if the host name exists as an AkamaiHost.
  - `verification_last_error` string — Error of the last verification of the domain. Read-only.
  - `changed` string, date-time — Date and time of the last change, in ISO 8601 UTC format. For example, "2023-08-09T13:27:43.8208302".
  - `changed_by` SimpleUser
    - `id` string, required — A unique Base58 value identifying this object.
    - `email` string, email — Email of the user.
    - `name` string, required — Name of the user.
  - `headers` SensitiveHeader[] — Custom headers to send.
    - `value_is_sensitive` boolean — Controls [sensitivity and obfuscation](https://help.probely.com/en/articles/12141165-how-to-manage-secrets-and-sensitive-data-in-snyk-api-web) of `value` field. If `true` the field is masked on Interfaces and Audit logs. When account's **Secrets Obfuscation setting** is also enabled, the API's field output will be `OBFUSCATED_<HASH>`.
    - `name` string, required
    - `value` string, required
    - `allow_testing` boolean
    - `authentication` boolean
    - `authentication_secondary` boolean
  - `cookies` SensitiveCookies[] — Custom cookies to send.
    - `value_is_sensitive` boolean — Controls [sensitivity and obfuscation](https://help.probely.com/en/articles/12141165-how-to-manage-secrets-and-sensitive-data-in-snyk-api-web) of `value` field. If `true` the field is masked on Interfaces and Audit logs. When account's **Secrets Obfuscation setting** is also enabled, the API's field output will be `OBFUSCATED_<HASH>`.
    - `name` string, required
    - `value` string, required
    - `allow_testing` boolean
    - `authentication` boolean
    - `authentication_secondary` boolean
  - `include` boolean — If true, the extra host is in the scope of the scan. If false, the extra host is not in the scope of the scan. Defaults to true.
  - `host` string

## Response `200`

- Asset — Model deals with setting verified to False if host changes.
  - `id` string, required — A unique Base58 value identifying this object.
  - `name` string — Name of the target or extra host. The maximum length is 255 characters.
  - `desc` string, nullable — Description of the target.
  - `stack` Framework[] — Technologies identified in the target during scans. The scanning engine uses them to fine-tune vulnerability tests and improve the explanation of how to fix vulnerabilities.
    - `id` string, required — A unique Base58 value identifying this object.
    - `name` string, required — Name of the technology. For example, "PHP, "SQLite", "Python", "Apache", or "Wordpress". The maximum lenght is 255 characters.
    - `desc` string, nullable, required — Description of the technology. Defaults to "".
  - `verified` boolean, required — If true, the domain is verified. Read-only.
  - `verification_token` string, uuid, required — Token used to verify the domain. Read-only.
  - `verification_date` string, date-time, required — Date and time of the verification of the domain, in ISO 8601 UTC format. For example, "2023-08-09T13:27:43.8208302". Read-only.
  - `verification_method` 'file' | 'back_office' | 'existing_domain' | 'dns_txt' | 'dns' | 'dns_cname' | 'meta_tag' | 'whitelist' | 'email' | 'aws_route53' | 'cloudflare' | 'waved' | 'akamai', required — Method used in the verification of the domain: (Read-only) * `file` - Verifies the domain against a text file in the root directory of the website. Learn more in [this article](https://help.probely.com/en/articles/3289281-how-to-verify-the-ownership-of-a-target-using-a-txt-file). * `back_office` - Automatically set if manually verified in the back-office. Read-only. * `existing_domain` - Automatically set if the upper-level domain is verified. For example, "my.example.com" is automatically verified if "example.com" is verified. Read-only. * `dns_txt` - Verifies the domain against a TXT record in the Domain Name System (DNS). Learn more in [this article](https://help.probely.com/en/articles/3285635-how-to-verify-the-ownership-of-a-target-using-dns-txt-records). * `dns` - Same as `dns_txt`. * `dns_cname` - Verifies the domain against a CNAME record in the Domain Name System (DNS). Learn more in [this article](https://help.probely.com/en/articles/5642359-how-to-verify-the-ownership-of-a-target-using-dns-cname-records). * `meta_tag` - Verifies the domain against a meta tag in the index page of the website. Learn more in [this article](https://help.probely.com/en/articles/5642393-how-to-verify-the-ownership-of-a-target-using-a-meta-tag). * `whitelist` - Automatically verifies if the domain is in the whitelist * `email` - Automatically verifies a domain if the user's email is in the same domain as the target * `aws_route53` - Automatically verifies a domain if the hostname exists as an AWS Route53 Zone. * `cloudflare` - Automatically verifies a domain if the host name exists and is verified as a CloudflareZone. * `waved` - Automatically verifies a domain if there is a waver agreement. * `akamai` - Automatically verifies a domain if the host name exists as an AkamaiHost.
  - `verification_last_error` string, required — Error of the last verification of the domain. Read-only.
  - `changed` string, date-time, required — Date and time of the last change, in ISO 8601 UTC format. For example, "2023-08-09T13:27:43.8208302".
  - `changed_by` SimpleUser, required
    - `id` string, required — A unique Base58 value identifying this object.
    - `email` string, email — Email of the user.
    - `name` string, required — Name of the user.
  - `headers` SensitiveHeader[] — Custom headers to send.
    - `value_is_sensitive` boolean — Controls [sensitivity and obfuscation](https://help.probely.com/en/articles/12141165-how-to-manage-secrets-and-sensitive-data-in-snyk-api-web) of `value` field. If `true` the field is masked on Interfaces and Audit logs. When account's **Secrets Obfuscation setting** is also enabled, the API's field output will be `OBFUSCATED_<HASH>`.
    - `name` string, required
    - `value` string, required
    - `allow_testing` boolean
    - `authentication` boolean
    - `authentication_secondary` boolean
  - `cookies` SensitiveCookies[] — Custom cookies to send.
    - `value_is_sensitive` boolean — Controls [sensitivity and obfuscation](https://help.probely.com/en/articles/12141165-how-to-manage-secrets-and-sensitive-data-in-snyk-api-web) of `value` field. If `true` the field is masked on Interfaces and Audit logs. When account's **Secrets Obfuscation setting** is also enabled, the API's field output will be `OBFUSCATED_<HASH>`.
    - `name` string, required
    - `value` string, required
    - `allow_testing` boolean
    - `authentication` boolean
    - `authentication_secondary` boolean
  - `include` boolean — If true, the extra host is in the scope of the scan. If false, the extra host is not in the scope of the scan. Defaults to true.
  - `host` string, required

## Other responses

- `400`
- `401`
- `404`
- `500`

---

[API](https://skmtc.net/probely/apis/snyk-api-web-s-api-reference-documentation.md) · [All operations](https://skmtc.net/probely/apis/snyk-api-web-s-api-reference-documentation/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/probely/snyk-api-web-s-api-reference-documentation/revisions/e29879bff01b/schema)