# Add a new blocked URL

Endpoint: POST /v1/controls/blockedUrls
Version: v1
Security: x-api-key

## Request fields (application/json):

  - `host` (string, required)
    The host part of the URL pattern. This can be a domain or a subdomain. Wildcards are supported for subdomains.
    Example: *.sub.domain.com

  - `path` (string)
    The path part of the URL pattern. Wildcards are supported. If not specified, the wildcard `*` is assumed, matching all paths for the given host.
    Example: /path/to*

  - `url` (string, required)
    The whole URL pattern - a combination of host and path. The host can be a domain or a subdomain. Wildcards are supported for subdomains and path. If not specified, the wildcard `*` is assumed for path, matching all paths for the derived host.
    Example: *.sub.domain.com/path/to*