PCI Compliance Release 1.6.8 API
February 03, 2026
Before understanding the API release highlights, learn more about the API server URL to be used in your API requests by referring to the Know Your Qualys API Server URL section. For these API Release Notes, <qualys_base_url> is mentioned in the sample API requests.
License Enforcement for DNS Scans
We have introduced DNS license enforcement in PCI Compliance to align DNS scanning with Quantity License Unit (QLU) requirements and existing IP-based licensing behavior.
This enhancement impacts both new and existing PCI users.
To learn more about this feature, refer to PCI Compliance 6.4 Release Notes.
To support this feature, we have updated the following PCI Admin APIs.
Add Host API — Add DNS Asset
| New or Updated API | Updated |
| API Endpoint | /pci/asset/add |
| Method | POST |
| DTD or XSD Changes | No |
We have updated the Add Host API to support DNS License Enforcement. To add DNS assets to a merchant user, you must have sufficient number of DNS licenses.
Sample: Add DNS Assets for Merchant using Add Host APISample: Add DNS Assets for Merchant using Add Host API
The following sample illustrates adding DNS assets to merchant users using the Add Hosts API. While adding a DNS host, the API validates if the associated merchant users have sufficient licenses for adding DNS hosts.
API Request
POST '<qualys_base_url>/pci/asset/add' \ --header 'X-Requested-With: test' \ --header 'Content-Type: application/json' \ --header 'Authorization: Basic cGNpQHBvZDQ6UWF0ZW1wMTIzIw==' \ --body '{ "assetType":"DNS", "assets": "dns1.com" }' \ --auth-basic-username 'user id' \ --auth-basic-password 'password'
“postdatafile.json” contains the request POST data.
API Response
{
"responseApiVersion": "LATEST - V1",
"data": "1 DNS added successfully"
}
Remove Host API — Remove DNS Assets
| New or Updated API | Updated |
| API Endpoint | /pci/asset/delete |
| Method | DELETE |
| DTD or XSD Changes | No |
We have updated the Remove Host API to support DNS License Enforcement. The freed-up licenses after removing DNS assets from a merchant account can be used for adding other DNS hosts to the merchant user.
Sample: Remove DNS Assets for Merchant using Remove Host APISample: Remove DNS Assets for Merchant using Remove Host API
The following sample illustrates removing DNS assets from merchant users using the Remove Hosts API. The newly released licenses can be used for adding other DNS hosts to the merchant user.
API Request
DELETE '<qualys_base_url>/pci/asset/delete' \
--header 'X-Requested-With: test' \
--header 'apiVersion: v1' \
--header 'Content-Type: application/json' \
--header 'Authorization: Basic cGNpQHBvZDQ6UWF0ZW1wMTIzIw==' \
--body '{
"assetType":"DNS",
"assets": "dns1.com"
}' \
--auth-basic-username 'user id' \
--auth-basic-password 'password'
“postdatafile.json” contains the request POST data.
API Response
{
"responseApiVersion": "V1",
"data": "1 DNS Host removed successfully"
}