--- title: O365 Ediscovery slug: connectors/o365-ediscovery docTags: createdAt: 2026-06-09T16:29:52.533Z --- The Microsoft Graph APIs for eDiscovery provide functionality for organizations to automate repetitive tasks and integrate with their existing eDiscovery tools to build repeatable workflows that might be required based on industry regulations. You can use the eDiscovery APIs to help with your legal needs. The Microsoft Graph APIs for eDiscovery are intended for the use of eDiscovery operations for litigation, investigation, and regulatory requests. ## Asset Setup For an app to get authorization and access to Microsoft Graph using the client credentials flow, you must follow these five steps: 1. Register the app with Microsoft Entra ID. 2. Configure Microsoft Graph application permissions on the app. 3. Request administrator consent. 4. Request an access token. 5. Call Microsoft Graph using the access token. For a detailed steps for the token generation, please refer to the [O365 Ediscovery Authentication Link](https://learn.microsoft.com/en-us/graph/auth-v2-service?context=graph%2Fapi%2Fbeta\&view=graph-rest-beta\&tabs=http) ## Capabilities This connector provides the following capabilities: - Create ediscoveryHoldPolicy - Get ediscoveryCase - List ediscoveryCases - List ediscoveryCustodian - List ediscoveryHoldPolicies - Create Review Set - Add To Review Set - Export Review Set ### Limitations APIs under the /beta version in Microsoft Graph are subject to change. ## Notes [O365 Ediscovery Documentation Link](https://learn.microsoft.com/en-us/graph/api/security-ediscoverycase-get?view=graph-rest-beta\&tabs=http) [O365 Ediscovery Authentication Link](https://learn.microsoft.com/en-us/graph/auth-v2-service?context=graph%2Fapi%2Fbeta\&view=graph-rest-beta\&tabs=http) # Configurations ## Oauth 2.0 Client Credentials Authenticates using oauth 2.0 client credentials ### Configuration Parameters | **Parameter** | **Description** | **Type** | **Required** | | -------------- | ---------------------------------- | -------- | ------------ | | url | A URL to the target host. | string | Required | | token\_url | | string | Required | | client\_id | The client ID | string | Required | | client\_secret | The client secret. | string | Required | | scope | Permission scopes for this action. | array | Optional | | verify\_ssl | Verify SSL certificate | boolean | Optional | | http\_proxy | A proxy to route requests through. | string | Optional | # Actions ## Add To Review Set Start the process of adding a collection from Microsoft 365 services to a review set. After the operation is created, you can get the status of the operation by retrieving the Location parameter from the response headers. ### Endpoint - **URL:** `/security/cases/ediscoveryCases/{{eDiscoveryCaseId}}/reviewSets/{{eDiscoveryReviewSetId}}/addToReviewSet` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | --------------------------------------- | -------- | ------------ | -------------------------------------------------------------------- | | `path_parameters.ediscoveryCaseId` | string | Required | Parameters for the Add To Review Set action | | `path_parameters.eDiscoveryReviewSetId` | string | Required | Parameters for the Add To Review Set action | | `search` | object | Optional | Parameter for Add To Review Set | | `search.id` | string | Required | The ID of the eDiscovery search you'd like to add to the review set. | | `additionalDataOptions` | string | Optional | The options for adding items to reviewSet. | ### Input Example `{"json_body":{"search":{"id":"c17e91d6-6bc0-4ecb-b388-269ea3d4ffb7"},"additionalDataOptions":"linkedFiles"},"path_parameters":{"ediscoveryCaseId":"58399dff-cebe-478f-b1af-d3227f1fd645","eDiscoveryReviewSetId":"63ef0fd7-0db2-45eb-a9d7-7d75c8239873"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | ### Output Example `{"status_code":202,"response_headers":{"Date":"Mon, 30 Oct 2023 17:08:47 GMT","Content-Type":"application/json","Transfer-Encoding":"chunked","Connection":"keep-alive","vary":"Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, A...","Content-Encoding":"gzip","expires":"0","Cache-Control":"no-cache, no-store, max-age=0, must-revalidate","x-xss-protection":"1; mode=block, 1; mode=block","pragma":"no-cache","x-content-type-options":"nosniff, nosniff","strict-transport-se...` ## Create ediscoveryHoldPolicy This action creates a new ediscoveryHoldPolicy object. ### Endpoint - **URL:** `/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/legalHolds` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ------------------------------------ | -------- | ------------ | ----------------------------------------------------- | | `path_parameters.ediscoveryCaseId` | string | Required | Parameters for the Create ediscoveryHoldPolicy action | | `displayName` | string | Optional | Name of the resource | | `description` | string | Optional | Parameter for Create ediscoveryHoldPolicy | | `userSources@odata.bind` | array | Optional | Response data | | `userSources@odata.bind.@odata.type` | string | Optional | Response data | | `userSources@odata.bind.email` | string | Optional | Response data | | `siteSources@odata.bind` | array | Optional | Response data | | `siteSources@odata.bind.@odata.type` | string | Optional | Response data | | `siteSources@odata.bind.site` | object | Optional | Response data | | `siteSources@odata.bind.site.webUrl` | string | Optional | Response data | ### Input Example `{"json_body":{"displayName":"My legalHold with sources","description":"Created from Graph API","userSources@odata.bind":[{"@odata.type":"microsoft.graph.security.userSource","email":"SalesTeam@M365x809305.OnMicrosoft.com"}],"siteSources@odata.bind":[{"@odata.type":"microsoft.graph.security.siteSource","site":{"webUrl":"https://m365x809305.sharepoint.com/sites/Design-topsecret"}}]},"path_parameters":{"ediscoveryCaseId":"b0073e4e-4184-41c6-9eb7-8c8cc3e2288b"}}` ### Output | **Parameter** | **Type** | **Description** | | --------------------------------- | -------- | ---------------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `@odata.context` | string | Response data | | `isEnabled` | boolean | Output field: isEnabled | | `errors` | array | Error message if any | | `description` | string | Output field: description | | `createdDateTime` | string | Time value | | `lastModifiedDateTime` | string | Time value | | `status` | string | Status value | | `id` | string | Unique identifier | | `displayName` | string | Name of the resource | | `createdBy` | object | Output field: createdBy | | `createdBy.application` | object | Output field: createdBy.application | | `createdBy.user` | object | Output field: createdBy.user | | `createdBy.user.id` | string | Unique identifier | | `createdBy.user.displayName` | object | Name of the resource | | `lastModifiedBy` | object | Output field: lastModifiedBy | | `lastModifiedBy.application` | object | Output field: lastModifiedBy.application | | `lastModifiedBy.user` | object | Output field: lastModifiedBy.user | | `lastModifiedBy.user.id` | string | Unique identifier | | `lastModifiedBy.user.displayName` | object | Name of the resource | ### Output Example `{"status_code":201,"response_headers":{"Date":"Mon, 30 Oct 2023 17:08:47 GMT","Content-Type":"application/json","Transfer-Encoding":"chunked","Connection":"keep-alive","vary":"Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, A...","Content-Encoding":"gzip","expires":"0","Cache-Control":"no-cache, no-store, max-age=0, must-revalidate","x-xss-protection":"1; mode=block, 1; mode=block","pragma":"no-cache","x-content-type-options":"nosniff, nosniff","strict-transport-se...` ## Create Review Sets This action creates a new ediscoveryReviewSet object. ### Endpoint - **URL:** `/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/reviewSets` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------------------- | -------- | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------ | | `path_parameters.ediscoveryCaseId` | string | Required | Parameters for the Create Review Sets action | | `@odata.type` | string | Optional | Response data | | `id` | string | Optional | The review set unique identifier. Read-only. | | `displayName` | string | Optional | The name of the review set. | | `createdBy` | object | Optional | Parameter for Create Review Sets | | `createdBy.@odata.type` | string | Optional | The user who created the review set. Read-only. | | `createdDateTime` | string | Optional | The datetime when the review set was created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. | ### Input Example `{"json_body":{"@odata.type":"#microsoft.graph.security.ediscoveryReviewSet","id":"String (identifier)","displayName":"String","createdBy":{"@odata.type":"microsoft.graph.identitySet"},"createdDateTime":"String (timestamp)"},"path_parameters":{"ediscoveryCaseId":"b0073e4e-4184-41c6-9eb7-8c8cc3e2288b"}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------------------- | -------- | ----------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `@odata.context` | string | Response data | | `displayName` | string | Name of the resource | | `id` | string | Unique identifier | | `createdDateTime` | string | Time value | | `createdBy` | object | Output field: createdBy | | `createdBy.application` | object | Output field: createdBy.application | | `createdBy.user` | object | Output field: createdBy.user | | `createdBy.user.id` | string | Unique identifier | | `createdBy.user.displayName` | object | Name of the resource | | `createdBy.user.userPrincipalName` | string | Name of the resource | ### Output Example `{"status_code":201,"response_headers":{"Date":"Mon, 30 Oct 2023 17:08:47 GMT","Content-Type":"application/json","Transfer-Encoding":"chunked","Connection":"keep-alive","vary":"Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, A...","Content-Encoding":"gzip","expires":"0","Cache-Control":"no-cache, no-store, max-age=0, must-revalidate","x-xss-protection":"1; mode=block, 1; mode=block","pragma":"no-cache","x-content-type-options":"nosniff, nosniff","strict-transport-se...` ## Export Review Set This action initiates an export from a reviewSet. ### Endpoint - **URL:** `/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/reviewSets/{{ediscoveryReviewSetId}}/export` - **Method:** `POST` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | --------------------------------------- | -------- | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `path_parameters.ediscoveryCaseId` | string | Required | Parameters for the Export Review Set action | | `path_parameters.ediscoveryReviewSetId` | string | Required | Parameters for the Export Review Set action | | `outputName` | string | Optional | Name of the export. | | `description` | string | Optional | Description of the export. | | `exportOptions` | string | Optional | pecifies options that control the format of the export. Possible values are originalFiles, text, pdfReplacement, fileInfo, tags. The fileInfo member is deprecated and has stopped returning data. The summary and load file are always included. | | `exportStructure` | string | Optional | Options that control file structure and packaging of the export. | ### Input Example `{"json_body":{"outputName":"Export via API","description":"Export for the Contoso investigation","exportOptions":"originalFiles,fileInfo,tags","exportStructure":"directory"},"path_parameters":{"ediscoveryCaseId":"58399dff-cebe-478f-b1af-d3227f1fd645","ediscoveryReviewSetId":"273f11a1-17aa-419c-981d-ff10d33e420f"}}` ### Output | **Parameter** | **Type** | **Description** | | ------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | ### Output Example `{"status_code":202,"response_headers":{"Date":"Mon, 30 Oct 2023 17:08:47 GMT","Content-Type":"application/json","Transfer-Encoding":"chunked","Connection":"keep-alive","vary":"Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, A...","Content-Encoding":"gzip","expires":"0","Cache-Control":"no-cache, no-store, max-age=0, must-revalidate","x-xss-protection":"1; mode=block, 1; mode=block","pragma":"no-cache","x-content-type-options":"nosniff, nosniff","strict-transport-se...` ## Get ediscoveryCase This action reads the properties and relationships of an ediscoveryCase object. ### Endpoint - **URL:** `/security/cases/ediscoveryCases/{{ediscoveryCaseId}}` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------------------- | -------- | ------------ | -------------------------------------------- | | `path_parameters.ediscoveryCaseId` | string | Required | Parameters for the Get ediscoveryCase action | | `parameters.count` | boolean | Optional | Parameters for the Get ediscoveryCase action | | `parameters.expand` | string | Optional | Parameters for the Get ediscoveryCase action | | `parameters.filter` | string | Optional | Parameters for the Get ediscoveryCase action | | `parameters.format` | string | Optional | Parameters for the Get ediscoveryCase action | | `parameters.orderby` | string | Optional | Parameters for the Get ediscoveryCase action | | `parameters.search` | string | Optional | Parameters for the Get ediscoveryCase action | | `parameters.select` | string | Optional | Parameters for the Get ediscoveryCase action | | `parameters.skip` | number | Optional | Parameters for the Get ediscoveryCase action | | `parameters.top` | number | Optional | Parameters for the Get ediscoveryCase action | ### Input Example `{"parameters":{"count":false,"expand":"members","filter":"startswith(givenName,'J')","format":"json","orderby":"displayName desc","search":"example","select":"givenName,surname","skip":11,"top":2},"path_parameters":{"id":"ediscoveryCaseId"}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `@odata.context` | string | Response data | | `description` | string | Output field: description | | `lastModifiedDateTime` | string | Time value | | `status` | string | Status value | | `closedDateTime` | object | Time value | | `externalId` | string | Unique identifier | | `id` | string | Unique identifier | | `displayName` | string | Name of the resource | | `createdDateTime` | string | Time value | | `lastModifiedBy` | object | Output field: lastModifiedBy | | `closedBy` | object | Output field: closedBy | ### Output Example `{"status_code":200,"response_headers":{"Date":"Mon, 30 Oct 2023 17:08:47 GMT","Content-Type":"application/json","Transfer-Encoding":"chunked","Connection":"keep-alive","vary":"Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, A...","Content-Encoding":"gzip","expires":"0","Cache-Control":"no-cache, no-store, max-age=0, must-revalidate","x-xss-protection":"1; mode=block, 1; mode=block","pragma":"no-cache","x-content-type-options":"nosniff, nosniff","strict-transport-se...` ## List ediscoveryCases This action retrieves a list of ediscoveryCase objects and their properties. ### Endpoint - **URL:** `/security/cases/ediscoveryCases` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | -------------------- | -------- | ------------ | ---------------------------------------------- | | `parameters.count` | boolean | Optional | Parameters for the List ediscoveryCases action | | `parameters.expand` | string | Optional | Parameters for the List ediscoveryCases action | | `parameters.filter` | string | Optional | Parameters for the List ediscoveryCases action | | `parameters.format` | string | Optional | Parameters for the List ediscoveryCases action | | `parameters.orderby` | string | Optional | Parameters for the List ediscoveryCases action | | `parameters.search` | string | Optional | Parameters for the List ediscoveryCases action | | `parameters.select` | string | Optional | Parameters for the List ediscoveryCases action | | `parameters.skip` | number | Optional | Parameters for the List ediscoveryCases action | | `parameters.top` | number | Optional | Parameters for the List ediscoveryCases action | ### Input Example `{"parameters":{"count":false,"expand":"members","filter":"startswith(givenName,'J')","format":"json","orderby":"displayName desc","search":"example","select":"givenName,surname","skip":11,"top":2}}` ### Output | **Parameter** | **Type** | **Description** | | --------------------------------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `@odata.context` | string | Response data | | `@odata.count` | number | Response data | | `value` | array | Value for the parameter | | `value.description` | string | Value for the parameter | | `value.lastModifiedDateTime` | string | Value for the parameter | | `value.status` | string | Status value | | `value.closedDateTime` | object | Value for the parameter | | `value.externalId` | string | Unique identifier | | `value.id` | string | Unique identifier | | `value.displayName` | string | Name of the resource | | `value.createdDateTime` | string | Value for the parameter | | `value.lastModifiedBy` | object | Value for the parameter | | `value.lastModifiedBy.application` | object | Value for the parameter | | `value.lastModifiedBy.user` | object | Value for the parameter | | `value.lastModifiedBy.user.id` | object | Unique identifier | | `value.lastModifiedBy.user.displayName` | string | Name of the resource | | `value.closedBy` | object | Value for the parameter | | `value.closedBy.application` | object | Value for the parameter | | `value.closedBy.user` | object | Value for the parameter | | `value.closedBy.user.id` | object | Unique identifier | | `value.closedBy.user.displayName` | string | Name of the resource | ### Output Example `{"status_code":200,"response_headers":{"Date":"Mon, 30 Oct 2023 17:08:47 GMT","Content-Type":"application/json","Transfer-Encoding":"chunked","Connection":"keep-alive","vary":"Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, A...","Content-Encoding":"gzip","expires":"0","Cache-Control":"no-cache, no-store, max-age=0, must-revalidate","x-xss-protection":"1; mode=block, 1; mode=block","pragma":"no-cache","x-content-type-options":"nosniff, nosniff","strict-transport-se...` ## List ediscoveryCustodian Get a list of the custodian objects and their properties. ### Endpoint - **URL:** `/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/custodians` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------------------- | -------- | ------------ | -------------------------------------------------- | | `path_parameters.ediscoveryCaseId` | string | Required | Parameters for the List ediscoveryCustodian action | ### Input Example `{"path_parameters":{"ediscoveryCaseId":"2192ca408ea2410eba3bec8ae873be6b"}}` ### Output | **Parameter** | **Type** | **Description** | | ---------------------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `@odata.context` | string | Response data | | `@odata.count` | number | Response data | | `value` | array | Value for the parameter | | `value.status` | string | Status value | | `value.holdStatus` | string | Status value | | `value.createdDateTime` | string | Value for the parameter | | `value.lastModifiedDateTime` | string | Value for the parameter | | `value.releasedDateTime` | object | Value for the parameter | | `value.id` | string | Unique identifier | | `value.displayName` | string | Name of the resource | | `value.email` | string | Value for the parameter | | `value.acknowledgedDateTime` | string | Value for the parameter | ### Output Example `{"status_code":200,"response_headers":{"Date":"Mon, 30 Oct 2023 17:08:47 GMT","Content-Type":"application/json","Transfer-Encoding":"chunked","Connection":"keep-alive","vary":"Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, A...","Content-Encoding":"gzip","expires":"0","Cache-Control":"no-cache, no-store, max-age=0, must-revalidate","x-xss-protection":"1; mode=block, 1; mode=block","pragma":"no-cache","x-content-type-options":"nosniff, nosniff","strict-transport-se...` ## List ediscoveryHoldPolicies Get a list of the ediscoveryHoldPolicy objects and their properties for a case. ### Endpoint - **URL:** `/security/cases/ediscoveryCases/{{ediscoveryCaseId}}/legalHolds` - **Method:** `GET` ### Input | **Argument Name** | **Type** | **Required** | **Description** | | ---------------------------------- | -------- | ------------ | ----------------------------------------------------- | | `path_parameters.ediscoveryCaseId` | string | Required | Parameters for the List ediscoveryHoldPolicies action | | `parameters.count` | boolean | Optional | Parameters for the List ediscoveryHoldPolicies action | | `parameters.expand` | string | Optional | Parameters for the List ediscoveryHoldPolicies action | | `parameters.filter` | string | Optional | Parameters for the List ediscoveryHoldPolicies action | | `parameters.format` | string | Optional | Parameters for the List ediscoveryHoldPolicies action | | `parameters.orderby` | string | Optional | Parameters for the List ediscoveryHoldPolicies action | | `parameters.search` | string | Optional | Parameters for the List ediscoveryHoldPolicies action | | `parameters.select` | string | Optional | Parameters for the List ediscoveryHoldPolicies action | | `parameters.skip` | number | Optional | Parameters for the List ediscoveryHoldPolicies action | | `parameters.top` | number | Optional | Parameters for the List ediscoveryHoldPolicies action | ### Input Example `{"parameters":{"count":false,"expand":"members","filter":"startswith(givenName,'J')","format":"json","orderby":"displayName desc","search":"example","select":"givenName,surname","skip":11,"top":2},"path_parameters":{"ediscoveryCaseId":"700cd868-d868-700c-68d8-0c7068d80c70"}}` ### Output | **Parameter** | **Type** | **Description** | | --------------------------------------- | -------- | -------------------------------- | | `status_code` | number | HTTP status code of the response | | `reason` | string | Response reason phrase | | `@odata.context` | string | Response data | | `@odata.count` | number | Response data | | `value` | array | Value for the parameter | | `value.isEnabled` | boolean | Value for the parameter | | `value.errors` | array | Value for the parameter | | `value.contentQuery` | string | Value for the parameter | | `value.description` | object | Value for the parameter | | `value.createdDateTime` | string | Value for the parameter | | `value.lastModifiedDateTime` | string | Value for the parameter | | `value.status` | string | Status value | | `value.id` | string | Unique identifier | | `value.displayName` | string | Name of the resource | | `value.createdBy` | object | Value for the parameter | | `value.createdBy.application` | object | Value for the parameter | | `value.createdBy.user` | object | Value for the parameter | | `value.createdBy.user.id` | string | Unique identifier | | `value.createdBy.user.displayName` | object | Name of the resource | | `value.lastModifiedBy` | object | Value for the parameter | | `value.lastModifiedBy.application` | object | Value for the parameter | | `value.lastModifiedBy.user` | object | Value for the parameter | | `value.lastModifiedBy.user.id` | string | Unique identifier | | `value.lastModifiedBy.user.displayName` | object | Name of the resource | ### Output Example `{"status_code":200,"response_headers":{"Date":"Mon, 30 Oct 2023 17:08:47 GMT","Content-Type":"application/json","Transfer-Encoding":"chunked","Connection":"keep-alive","vary":"Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, A...","Content-Encoding":"gzip","expires":"0","Cache-Control":"no-cache, no-store, max-age=0, must-revalidate","x-xss-protection":"1; mode=block, 1; mode=block","pragma":"no-cache","x-content-type-options":"nosniff, nosniff","strict-transport-se...` # Response Headers | **Header** | **Description** | **Example** | | ------------------------- | ---------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- | | Cache-Control | Directives for caching mechanisms | no-cache, no-store, max-age=0, must-revalidate | | CF-Cache-Status | HTTP response header: CF-Cache-Status | DYNAMIC | | CF-RAY | HTTP response header: CF-RAY | 81e54323fddf9a90-NAG | | Connection | HTTP response header: Connection | keep-alive | | Content-Encoding | HTTP response header: Content-Encoding | gzip | | content-security-policy | HTTP response header: content-security-policy | default-src 'self' | | Content-Type | The media type of the resource | application/json | | Date | The date and time at which the message was originated | Mon, 30 Oct 2023 17:08:47 GMT | | expires | The date/time after which the response is considered stale | 0 | | permissions-policy | HTTP response header: permissions-policy | xr-spatial-tracking=(self) | | pragma | HTTP response header: pragma | no-cache | | referrer-policy | HTTP response header: referrer-policy | strict-origin-when-cross-origin | | Server | Information about the software used by the origin server | cloudflare | | strict-transport-security | HTTP response header: strict-transport-security | max-age=31536000 ; includeSubDomains, max-age=63072000; includeSubDomains; preload | | Transfer-Encoding | HTTP response header: Transfer-Encoding | chunked | | vary | HTTP response header: vary | Origin, Access-Control-Request-Method, Access-Control-Request-Headers, Origin, Access-Control-Request-Method, Access-Control-Request-Headers | | x-content-type-options | HTTP response header: x-content-type-options | nosniff, nosniff | | x-frame-options | HTTP response header: x-frame-options | DENY, DENY | | x-xss-protection | HTTP response header: x-xss-protection | 1; mode=block, 1; mode=block |