List custom scripts injected into a site's published pages

Returns all integration scripts configured to be injected into the published pages of a site, such as analytics trackers, chat widgets, or custom JavaScript. Use this to audit which third-party scripts are active on the site.

Available in MCP

get

Authorizations

useroauth

AuthorizationstringRequired

Bearer authentication header of the form Bearer <token>.

Path parameters

organizationIdstringRequired

A unique entity identifier

Pattern: ^[a-zA-Z0-9_-]+$

siteIdstringRequired

The unique id of the site

Responses

200

OK

application/json

scriptstring · uri · max: 2048Required

Script URL to load.

contentSecurityPolicystringOptional

Content Security Policy to secure the loading of this script.

cookiesbooleanRequired

If true, the script will potentially load use cookies and visitors should be aware.

400

Bad Request

application/json

get/orgs/{organizationId}/sites/{siteId}/integration-scripts

HTTPcURLJavaScriptPython

GET /v1/orgs/{organizationId}/sites/{siteId}/integration-scripts HTTP/1.1
Host: api.gitbook.com
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

[
  {
    "script": "https://example.com",
    "contentSecurityPolicy": "text",
    "cookies": true
  }
]