Create malware scan configuration | Modular DS

curl -X POST https://api.modulards.com/api/public/v1/preset-malware-scans \
     -H "Authorization: Bearer <token>" \
     -H "Content-Type: application/json" \
     -d '{
  "default": false,
  "extensions": [
    "php3",
    "phtml"
  ],
  "max_file_size": 5242880,
  "name": "Client sites",
  "schedule": {
    "day_month": 1,
    "frequency": "monthly",
    "start_hour": "03:00",
    "timezone": "Europe/Madrid"
  },
  "tier": "basic"
}'

{
  "data": {
    "attributes": {
      "created_at": "2026-09-18T09:00:00.000000Z",
      "extensions": [
        "php3",
        "phtml"
      ],
      "is_default": false,
      "max_file_size": 5242880,
      "name": "Client sites",
      "schedule": {
        "day_month": 1,
        "day_week": null,
        "frequency": "monthly",
        "start_hour": "03:00",
        "timezone": "Europe/Madrid"
      },
      "status": "enabled",
      "tier": "basic",
      "updated_at": "2026-09-18T09:00:00.000000Z"
    },
    "id": "7",
    "links": {
      "self": "https://api.modulards.com/api/public/v1/preset-malware-scans/7"
    },
    "type": "preset-malware-scans"
  },
  "jsonapi": {
    "version": "1.1"
  }
}

Creates a Malware Scanner global configuration: a named scan schedule you then assign to websites. Answers 201 with the configuration document and a Location header. Creating it scans no website yet - assign websites with “Assign websites to a malware scan configuration”.

Body (JSON):

name (string, required, max 255).
tier (string, required) - basic (scans only) or premium (scans and cleans, depends on the addon); cannot change after creation.
schedule (object, required): frequency (monthly, weekly, daily - a basic configuration is limited to monthly), start_hour (HH:MM, 24 hours), timezone (IANA name, e.g. Europe/Madrid), day_week (monday … sunday, required for a weekly schedule), day_month (1-31, required for a monthly schedule).
extensions (array of string, optional) - file extensions skipped by every scan, from the provider’s own code-file set (php, phtml, php3, php4, php5, php7, phps, inc, js, html, htm, htaccess, svg); omit to scan every extension.
max_file_size (integer, optional) - bytes, 0 to 5242880 (5 MB); omit to keep the default.
default (boolean, optional) - true makes it the configuration new websites receive.

region and batch are never accepted here and answer 422 - a Malware Scanner configuration carries no region, and the technical batch sizes stay a dashboard-only setting.

Requires a full-access token (read-only tokens answer 403). Validation failures answer 422 with a JSON:API errors document.

Creates a Malware Scanner global configuration: a named scan schedule you then assign to websites. Answers **201** with the configuration document and a `Location` header. Creating it scans no website yet - assign websites with "Assign websites to a malware scan configuration". **Body** (JSON): - `name` (string, required, max 255). - `tier` (string, required) - `basic` (scans only) or `premium` (scans and cleans, depends on the addon); cannot change after creation. - `schedule` (object, required): `frequency` (`monthly`, `weekly`, `daily` - a basic configuration is limited to `monthly`), `start_hour` (`HH:MM`, 24 hours), `timezone` (IANA name, e.g. `Europe/Madrid`), `day_week` (`monday` ... `sunday`, required for a weekly schedule), `day_month` (1-31, required for a monthly schedule). - `extensions` (array of string, optional) - file extensions skipped by every scan, from the provider's own code-file set (`php`, `phtml`, `php3`, `php4`, `php5`, `php7`, `phps`, `inc`, `js`, `html`, `htm`, `htaccess`, `svg`); omit to scan every extension. - `max_file_size` (integer, optional) - bytes, 0 to 5242880 (5 MB); omit to keep the default. - `default` (boolean, optional) - `true` makes it the configuration new websites receive. `region` and `batch` are never accepted here and answer 422 - a Malware Scanner configuration carries no region, and the technical batch sizes stay a dashboard-only setting. Requires a full-access token (read-only tokens answer 403). Validation failures answer 422 with a JSON:API `errors` document.

Authentication

AuthorizationBearer

Personal access token created in the Modular DS dashboard; read-only tokens can only call GET endpoints.

Request

This endpoint expects an object.

defaultbooleanOptional

extensionslist of stringsOptional

max_file_sizedoubleOptional

namestringOptional

scheduleobjectOptional

tierstringOptional

Response headers

LocationstringOptional

Response

201 - Malware scan configuration created

dataobjectOptional

jsonapiobjectOptional

Errors

422

Unprocessable Entity Error

Body (JSON):

name (string, required, max 255).
tier (string, required) - basic (scans only) or premium (scans and cleans, depends on the addon); cannot change after creation.
schedule (object, required): frequency (monthly, weekly, daily - a basic configuration is limited to monthly), start_hour (HH:MM, 24 hours), timezone (IANA name, e.g. Europe/Madrid), day_week (monday … sunday, required for a weekly schedule), day_month (1-31, required for a monthly schedule).
extensions (array of string, optional) - file extensions skipped by every scan, from the provider’s own code-file set (php, phtml, php3, php4, php5, php7, phps, inc, js, html, htm, htaccess, svg); omit to scan every extension.
max_file_size (integer, optional) - bytes, 0 to 5242880 (5 MB); omit to keep the default.
default (boolean, optional) - true makes it the configuration new websites receive.

region and batch are never accepted here and answer 422 - a Malware Scanner configuration carries no region, and the technical batch sizes stay a dashboard-only setting.

Requires a full-access token (read-only tokens answer 403). Validation failures answer 422 with a JSON:API errors document.