# Add a new blocked URL

Endpoint: POST /v1/controls/blockedUrls
Version: v1
Security: x-api-key

## Security:

  - `x-api-key` (unknown)
    apiKey in header x-api-key

## Request body:

  - `application/json` (unknown)
    A URL pattern used to block access to matching sites. A maximum of 2,000 blocked URLs is supported.

## Request fields (application/json):

  - `host` (string, required)
    The host part of the URL pattern. This can be a domain or a subdomain. Wildcards (`*`) are supported anywhere in the host, including partial labels and the TLD (e.g. `*.com`, `ai*.domain.com`, `example.*`). Patterns that match every host, such as `*` or `*.*`, are not allowed.
    Example: *.domain.com

  - `path` (string)
    The path part of the URL pattern. Wildcards are supported. If not specified, the wildcard `*` is assumed, matching all paths for the given host.
    Example: /path/to*

  - `url` (string, required)
    The whole URL pattern - a combination of host and path. The host can be a domain or a subdomain. Wildcards (`*`) are supported in the path and anywhere in the host, including partial labels and the TLD (e.g. `*.com`, `ai*.domain.com`, `example.*`). Host patterns that match every host, such as `*` or `*.*`, are not allowed. If no path is specified, the wildcard `*` is assumed for path, matching all paths for the derived host.
    Example: *.domain.com/path/to*

## Request examples:

  - `Block all paths for the given host using the default path wildcard.` (unknown)

  - `Block all paths for the given subdomain using the default path wildcard.` (unknown)

  - `Wildcards used both in the host and path.` (unknown)

  - `Block all URLs on a specific domain` (unknown)

  - `Block all URLs on any subdomain of a specific domain` (unknown)

  - `Block paths matching the pattern on any subdomain of a specific domain` (unknown)

  - `Block all domains under a TLD` (unknown)

  - `Wildcard within part of a subdomain label` (unknown)

  - `Block a domain on any TLD` (unknown)

## Response 200:

  - `200` (unknown)
    OK

## Response 400:

  - `400` (unknown)
    Bad Request