GET
/v1/service/@id/waf/zones/@zone/originGet a website's origin servers
Origin servers, the available TLS modes and the limit.
API v1 · Updated 2026-10-21View .md
Call it through the gateway https://api.tino.vn/v1 with a token that has the waf:read scope; see Calling the Tino API.
Authentication
Send the token in the header Authorization:
Authorization: Bearer <token>
Tokens that can call it: app tokens (tinoat_, Sign in with Tino) or personal API tokens (tinopat_).
Scopes
waf:read
Parameters
Path parameters
| Name | Type | Required | Description |
|---|---|---|---|
id | int | Required | Service ID |
zone | string | Required | Website ID (UUID) on TinoWAF |
Response
No live sample: the route changes real data or the test account has no data for it. The answer is a JSON object; errors follow the common shape in Calling the Tino API.
Error codes
| Error code | Description |
|---|---|
401 · invalid_token | The token is wrong, expired or revoked. |
403 · insufficient_scope | The token lacks the waf:read scope. |
403 · ip_not_allowed | A personal API token called from an IP outside its allow-list. |
Business errors of a route usually come as HTTP 200 with {"error": ["<code>"]}; see common error codes.