Denylist

Denylist management endpoints — block specific entity IDs from being served

Get all denylist entries

get

https://asset-bundle-registry.decentraland.org

/denylist

Returns all entity IDs currently in the denylist. This endpoint is public and requires no authentication.

Responses

200

List of denylist entries

application/json

A single entry in the denylist, representing a blocked entity

entity_idstringRequired

Lowercase entity ID (Catalyst CID) that is blocked

reasonstring · nullableOptional

Optional human-readable reason why this entity was denylisted

created_bystringRequired

Lowercase Ethereum address of the moderator who first added the entry

created_atnumberRequired

Unix timestamp in milliseconds when the entry was created

updated_atnumberRequired

Unix timestamp in milliseconds when the entry was last updated

get/denylist

HTTPcURLJavaScriptPython

GET /denylist HTTP/1.1
Host: asset-bundle-registry.decentraland.org
Accept: */*

200

List of denylist entries

[
  {
    "entity_id": "text",
    "reason": null,
    "created_by": "text",
    "created_at": 1,
    "updated_at": 1
  }
]

Add or update a denylist entry

post

https://asset-bundle-registry.decentraland.org

/denylist/{entityId}

Adds an entity ID to the denylist or updates an existing entry. Requires a valid signed fetch from an address listed in the dapps-platform_user_moderators feature flag.

If the entity is already in the denylist, its reason and updated_at fields are updated but created_by is preserved from the original entry.

Authorizations

SignedFetch

AuthorizationstringRequired

Signed fetch authentication using @dcl/platform-crypto-middleware (ADR-44). Requires auth chain headers (x-identity, x-signature, x-timestamp) for signature validation. See http://adr.decentraland.org/adr/ADR-44 for details.

Path parameters

entityIdstringRequired

Entity ID (e.g. a Catalyst CID) to add to the denylist

Body

application/json

reasonstring · nullableOptional

Optional human-readable reason for denylisting this entity

Responses

201

Entry created or updated

application/json

A single entry in the denylist, representing a blocked entity

entity_idstringRequired

Lowercase entity ID (Catalyst CID) that is blocked

reasonstring · nullableOptional

Optional human-readable reason why this entity was denylisted

created_bystringRequired

Lowercase Ethereum address of the moderator who first added the entry

created_atnumberRequired

Unix timestamp in milliseconds when the entry was created

updated_atnumberRequired

Unix timestamp in milliseconds when the entry was last updated

400

Bad request — entity ID is missing

application/json

401

Unauthorized — invalid or missing signed fetch

application/json

403

Forbidden — signer is not an authorized moderator

application/json

post/denylist/{entityId}

HTTPcURLJavaScriptPython

POST /denylist/{entityId} HTTP/1.1
Host: asset-bundle-registry.decentraland.org
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 15

{
  "reason": null
}

{
  "entity_id": "text",
  "reason": null,
  "created_by": "text",
  "created_at": 1,
  "updated_at": 1
}

Remove a denylist entry

delete

https://asset-bundle-registry.decentraland.org

/denylist/{entityId}

Removes an entity ID from the denylist. Requires a valid signed fetch from an address listed in the dapps-platform_user_moderators feature flag.

Authorizations

SignedFetch

AuthorizationstringRequired

Signed fetch authentication using @dcl/platform-crypto-middleware (ADR-44). Requires auth chain headers (x-identity, x-signature, x-timestamp) for signature validation. See http://adr.decentraland.org/adr/ADR-44 for details.

Path parameters

entityIdstringRequired

Entity ID to remove from the denylist

Responses

200

Entry successfully removed

application/json

Generic result for mutating operations

okbooleanRequired

Whether the operation succeeded

messagestringOptional

Optional human-readable message

400

Bad request — entity ID is missing

application/json

401

Unauthorized — invalid or missing signed fetch

application/json

403

Forbidden — signer is not an authorized moderator

application/json

404

Entity ID not found in the denylist

application/json

delete/denylist/{entityId}

HTTPcURLJavaScriptPython

DELETE /denylist/{entityId} HTTP/1.1
Host: asset-bundle-registry.decentraland.org
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "ok": true,
  "message": "text"
}