# Retrieve the malicious copy paste detection configuration

Returns your organization's current malicious copy paste detection configuration, including every rule and its settings. Rules are returned in the order they're evaluated, with the highest-priority rule first.

Endpoint: GET /v1/controls/maliciousCopyPasteDetection/configuration
Version: v1
Security: x-api-key

## Response 200 fields (application/json):

  - `globals` (object, required)
    Control-wide settings that apply across every rule.

  - `globals.ignoredHosts` (array)
    Hosts ignored by malicious copy paste detection. Can be a domain (example.com), wildcard (*.example.com), hostname (myhost), or IP address (10.0.1.1).
    Example: ["*.internal.example.com","build-server","10.0.1.1"]

  - `rules` (array, required)
    Complete list of Malicious Copy Paste Detection rules.

  - `rules.id` (string)
    The rule's unique identifier.
    Example: c478966c-f927-411c-b919-179832d3d50c

  - `rules.name` (string, required)
    A short name to help you recognise the rule.
    Example: Block malicious paste for Finance

  - `rules.enabled` (boolean, required)
    Whether the rule is active.
    Example: true

  - `rules.mode` (string, required)
    What happens when malicious copy paste activity a rule matches is detected.
    Enum: "MONITOR", "BLOCK", "WARN", "OFF"

  - `rules.title` (string)
    Heading shown to the user. Required when mode is BLOCK or WARN, and must be omitted when mode is MONITOR or OFF.
    Example: Paste blocked

  - `rules.subtext` (string)
    Message shown to the user. Markdown is supported. Required when mode is BLOCK or WARN, and must be omitted when mode is MONITOR or OFF.
    Example: This paste looks malicious and has been blocked.

  - `rules.buttonText` (string)
    Label for the button that lets the user proceed. Required when mode is WARN, and must be omitted for every other mode.
    Example: Proceed anyway

  - `rules.safeText` (string)
    Message shown to the user when the paste is deemed safe. Required when mode is BLOCK or WARN, and must be omitted when mode is MONITOR or OFF.
    Example: This paste is safe to use.

  - `rules.payloadCollection` (boolean)
    Whether to collect the paste payload for matching activity. Applies to MONITOR, WARN, and BLOCK modes.
    Example: true

  - `rules.osTarget` (string)
    The operating system family this rule targets.
    Enum: "WINDOWS", "UNIX"

  - `rules.criteria` (object)
    Restrict the rule to apply only under the specified conditions.

  - `rules.criteria.employeeIds` (object)
    Match specific employees by their employee identifier.
    Example: {"matches":["8c4f1d2e-9a0b-4c1d-8e2f-3a4b5c6d7e8f"]}

  - `rules.criteria.employeeIds.matches` (array, required)
    One or more values to match.

  - `rules.criteria.employeeIds.action` (string)
    Apply the rule to the matched values (INCLUDE) or to everything except them (EXCLUDE). Defaults to INCLUDE when omitted.
    Enum: "INCLUDE", "EXCLUDE"

  - `rules.criteria.employeeGroups` (object)
    Match employees by the groups they belong to.
    Example: {"matches":["Finance","Engineering"]}