Name of the API product's operation. This variable helps you differentiate between theQuota policy's settings and the quota settings on an API product's operation.

For example,my-operation.

The resource name of the operation that is matched to a request.

An array of HTTP methods that the operation being matched allows.

Gets the custom attribute value that matches thekey_name.

The common name specified in the TLS/SSL certificate presented by the client app.

The country in the TLS/SSL certificate presented by the client app.

The email address in the TLS/SSL certificate presented by the client app.

The HTTP host IP associated with the request received by the ProxyEndpoint.

The IP address of the client or system sending the message to the load balancer. For example, this could be the original client IP or a load balancer IP.

The locality (City) in the TLS/SSL certificate presented by the client.

The organizational unit in the TLS/SSL certificate presented by the client.

The HTTP port associated with the originating client request to the ProxyEndpoint.

The time, expressed in string form, at which the proxy finished receiving the request from the originating client at the ProxyEndpoint. For example: Wed, 21 Aug 2013 19:16:47 UTC.

This time value is the string representation of the corresponding 32-bit timestamp quantity. For example, Wed, 21 Aug 2013 19:16:47 UTC corresponds to the timestamp value of 1377112607413.

The timestamp value specifying when the proxy finished receiving the request from the originating client at the ProxyEndpoint. This value is a 64-bit (long) integer containing the number of milliseconds elapsed since midnight, on January 1, 1970 UTC.

The time, expressed in string form, at which the proxy began receiving the request from the originating client at the ProxyEndpoint. For example: Wed, 21 Aug 2013 19:16:47 UTC

This time value is the string representation of the corresponding 32-bit timestamp quantity. For example, Wed, 21 Aug 2013 19:16:47 UTC corresponds to the timestamp value of 1377112607413.

The timestamp value specifying when the proxy began receiving the request from the originating client at the ProxyEndpoint. This value is a 64-bit (long) integer containing the number of milliseconds elapsed since midnight, on January 1, 1970 UTC.

The resolved client IP address. This is either the value determined from a configured client IP resolution setting or from the default algorithm, if a client IP resolution setting is not specified. SeeClient IP resolution for information.

Returns HTTP or HTTPS depending on the transport used by client app to send the request message.

The time, expressed in string form, at which the proxy finished sending the response from the ProxyEndpoint to the client. For example: Wed, 21 Aug 2013 19:16:47 UTC.

This value is a string representation of the corresponding 32-bitclient.sent.end.timestamp. For example, Wed, 21 Aug 2013 19:16:47 UTC corresponds to the timestamp value of 1377112607413.

For information about accessing this property, seeMessageLogging policy.

For information about accessing this property, seeMessageLogging policy.

This value is a string representation of the corresponding 32-bitclient.sent.start.timestamp. For example, Wed, 21 Aug 2013 19:16:47 UTC corresponds to the timestamp value of 1377112607413.

For information about accessing this property, seeMessageLogging policy.

For information about accessing this property, seeMessageLogging policy.

true if the ProxyEndpoint is configured for TLS/SSL; otherwisefalse.

The state in the TLS/SSL certificate presented by the client.

You cannot set quotas at the operation level. Instead, set them at the environment level.

Selection sets can be accessed recursively. For example, after aselectionSet.index, you can have anotherselectionSet.index rather than aname property. And after that another and so on until you reach the value of<MaxCount> that you set in theGraphQL policy.

Error flag.

List of failed TargetServers during load balancing at TargetEndpoint.

true if fallback is enabled for the TargetServer invoked during load balancing at TargetEndpoint.

TargetServer invoked during load balancing at TargetEndpoint. Set only if the<Path> element is set while defining the load balancer element.

A contextual object, with the same value asrequest in the request Flow or asresponse in the response Flow or aserror in the Error flow.

Content of the request, response, or error message.

Base64-encoded payload content of the request, response, or error message.

URL-safe base64-encoded payload content of the request, response, or error message.

Value of the specified form parameter.

All values of the specified form parameter in the message.

Count of the values of the specified form parameters in the message.

Count of all form parameters in the message.

Value of all form parameters in the message.

A comma-separated list of names of all the form parameters in the message.

Value of form string in the message.

Gets or sets the value of a particular header found in the request. If the header contains a comma, upon read you will receive only the segment of the text up to the first comma.

For example, if theCache-control header ispublic, maxage=16544, then the return value ofmessage.header.cache-control ispublic.

If you want the entire header as a string, use a variable likemessage.header.header_name.values.string.

The value of theNth particular header value in the message, either request or response, depending on the state of the flow. Apigee splits header text values by commas. The index starts at 1 for the left-most value.

For example, if theCache-control header ispublic,maxage=16544, then the return value ofmessage.header.cache-control.2 ismaxage=16544.

All values of the specified HTTP header name in the message.

Count of the values of the specified HTTP header name in the message.

All the values of a particular header in the message, in the form of a single string.

For example, if theCache-control header ispublic,maxage=16544, then the return value ofmessage.header.cache-control.values.string ispublic,maxage=16544.

Count of all HTTP headers in the message.

Value of all HTTP headers in the message.

A comma-separated list of names of all the headers in the message.

The complete request message path in URL excluding any query parameters.

Returns the specified message query parameter.

The value of theNth query parameter in the message. For example, if therequest.querystring isa=hello&a=world, then the return value ofmessage.queryparam.a.1 ishello.

As an example of writing multiple values for a single query parameter name, such astype=siteid:1&type=language:us-en&type=currency:USD, set the following:

• message.queryparam.type.1 tositeid:1
• message.queryparam.type.2 tolanguage:en-us
• message.queryparam.type.3 tocurrency:USD

All the values of a particular query parameter in the message, formatted as a comma-separated list.

For example, if the query string isa=hello&a=world, then the value ofmessage.queryparam.a.values is['hello', 'world']code>.

The total count of a specified query parameter associated with the request sent to the ProxyEndpoint from the client app.

The total count of all query parameters associated with the request sent to the ProxyEndpoint from the client app.

A list of all query parameter names associated with the request sent to the ProxyEndpoint from the client app.

A comma-separated list of names of all the query parameters in the message.

A string containing all query parameter names and values associated with the request sent to the ProxyEndpoint from the client app.

For example, for the requesthttp://api.apifactory.com/inventors?name=nick&surname=danger, the value ofmessage.querystring isname=nick&surname=danger.

HTTP status code of the response message from target.

Message of type TransportMessage which is a contextual object.

The complete URI path (following the domain URL) including query parameters.

For example, for the requesthttp://api.apifactory.com/inventors?name=nikola&surname=tesla, this variable returnsinventors?name=nikola&surname=tesla.

The HTTP verb (GET,PUT,POST,DELETE, etc.) associated with the request.

The HTTP version associated with the request sent to the ProxyEndpoint from the client application.

Holds the globally unique ID for the request, which includes the load balancer host name. This ID allows requests received at the load balancer to be tracked after they are sent to the message processor.

This ID is logged in Apigee error logs to correlate themessageid with the errors.

Flag that specifies whether the API request is blocked. Set totrue ifis_subscription_found isfalse.

This flow variable is available if the MonetizationLimitsCheck policy is attached to the API proxy. See MonetizationLimitsChecks Flow variables.

Flag that specifies whether the developer has an active subscription to the API product. Set totrue if a developer has a subscription.

This flow variable is available if the MonetizationLimitsCheck policy is attached to the API proxy. See MonetizationLimitsChecks Flow variables.

Current balance in the developer's prepaid account wallet associated with the rate plan's currency.

Currency of the balance available in themint.limitscheck.prepaid_developer_balance variable.

Name of the associated API product.

This flow variable is available if the MonetizationLimitsCheck policy is attached to the API proxy. See MonetizationLimitsChecks Flow variables.

Additional information about the execution of the MonetizationLimitsCheck policy for debugging purposes.

This flow variable is available if the MonetizationLimitsCheck policy is attached to the API proxy. See MonetizationLimitsChecks Flow variables.

Consumption-based fees.

Set the fees whencreating a rate plan.

Consumption-based pricing type. For example:FIXED_PER_UNIT

Set the consumption-based fees whencreating a rate plan.

Currency for calculating the revenue.

This flow variable has the value of thecurrencymonetization variable.

Revenue to be shared with developer.

Set the revenue to be shared with the developer whencreating a rate plan.

Flag that specifies whether the API product is currently monetized (that is, if there is an active rate plan in effect).

This flow variable is added by the VerifyAPIKey or VerifyAccessToken policy attached to the API proxy. SeeAdding an authentication policy.

Revenue for calculating the developer's share.

The flow variable has the value of therevShareGrossPricemonetization variable.

Factor (multiplier) by which the per-transaction cost is multiplied.

The flow variable has the value of theperUnitPriceMultipliermonetization variable.

Rate charged for the API call.

This flow variable shows the consumption-based fee per API call. Set the consumption-based fee whencreating a rate plan. If you have configured theperUnitPriceMultipliermonetization variable in your DataCapture policy, Apigee calculates the cost of the transaction after considering the value of theperUnitPriceMultiplier variable. For more information, seeApi price multiplier inMetrics.

Rate charged for the API call without theperUnitPriceMultiplier calculation.

If the DataCapture policy captures theperUnitPriceMultipliermonetization variable, this flow variable shows the transaction cost before multiplying the cost byperUnitPriceMultiplier.

ID of the rate plan.

This flow variable is added by the VerifyAPIKey or VerifyAccessToken policy attached to the API proxy. SeeAdding an authentication policy.

Revenue share rates.

Set the revenue share rate whencreating a rate plan.

Revenue share type. For example:FIXED

Set the revenue share type whencreating a rate plan.

Specifies if the transaction is monetized.

This flow variable has the value of thetransactionSuccessmonetization variable.

Current usage of the prepaid developer.

The usage is calculated based on your rate plan configuration and the value of theperUnitPriceMultiplier monetization variable.

Expiration time for the rate plan in milliseconds since epoch.

This flow variable is added by the VerifyAPIKey or VerifyAccessToken policy attached to the API proxy. SeeAdding an authentication policy.

Activation time for the rate plan in milliseconds since epoch.

This flow variable is added by the VerifyAPIKey or VerifyAccessToken policy attached to the API proxy. SeeAdding an authentication policy.

Status of the monetized call. Populated only on error.

HTTP status code of the monetized call. Populated only on error.

Expiration time for the API product subscription in milliseconds since epoch.

This flow variable is available if the MonetizationLimitsCheck policy is attached to the API proxy. See MonetizationLimitsChecks Flow variables.

Activation time for the API product subscription in milliseconds since epoch.

This flow variable is available if the MonetizationLimitsCheck policy is attached to the API proxy. See MonetizationLimitsChecks Flow variables.

Indicates whether monetization is successful for the transaction.

Themint.tx_success_result variable can have the following values:

• tx_success set to true: ThetransactionSuccess variable istrue, and the transaction is monetized. Because the transaction is monetized, the values ofmint.mintng_rate andmint.mintng_dev_share variables are calculated.
• tx_success set to false: ThetransactionSuccess variable isfalse, and the transaction is not monetized. Because the transaction is not monetized, the values ofmint.mintng_rate andmint.mintng_dev_share variables are not calculated.
• tx_success not found. Message status code was non 2xx: ThetransactionSuccess variable is not captured and the HTTP status code (message.status.code) of the transaction is not 2xx. The transaction is not monetized.
• tx_success not found. Message status code was 2xx: ThetransactionSuccess variable is not captured and the HTTP status code (message.status.code) of the transaction is 2xx. The transaction is monetized.

Name of the organization.

The value of the Base Path in your API proxy endpoint configuration. The base path is the left-most URI fragment that follows the host in the URL. Conditional flow URIs follow the base path.

Suppose that you have an API Proxy Endpoint configured with a basepath of/v2/weatherapi. (SeeProxy Endpoint configuration for details.) In that case, if the inbound request uses the URLhttps://myhost.example.net/v2/weatherapi/forecastrss?w=12797282, then:

• The host name ismyhost.example.net. You can retrieve this by reading the variablerequest.header.host.
• The base path is/v2/weatherapi. Retrieve this by reading the variableproxy.basepath.
• The path suffix is/forecastrss. Retrieve this by reading the variableproxy.pathsuffix.

If you define a dynamic Base Path in your API proxy configuration, such as/v2/*/weatherapicode>, then theproxy.basepath variable is set to the dynamic path. To retrieve the actual URL for the request, read and parse the variableproxy.url.

TheX-Forwarded-For address of the inbound call, which is the IP address Apigee received from the last external TCP handshake. This could be the calling client or a load balancer.

The name attribute configured for the ProxyEndpoint.

The value of the path suffix in the URL that is sent from the client and received at the ProxyEndpoint.

The basepath is the left-most path component that uniquely identifies an API proxy within an Environment Group. Suppose that you have an API Proxy endpoint configured with a basepath of/v2/weatherapi. In that case, a request sent tohttps://myhost.example.net/v2/weatherapi/forecastrss?w=12797282, theproxy.pathsuffix variable will hold the string/forecastrss.

Gets the complete URL associated with the proxy request received by the ProxyEndpoint, including any query parameters present.

Apigee sets this flow variable only if the publish request is successful.

The complete request, including any payload present.

Gets or sets the payload of the request message.

Base64-encoded payload content of the request message.

URL-safe base64-encoded payload content of the request message.

Gets or sets the value of the specified form parameter in the request sent from the client application.

All the values of a particular form parameter in the request, formatted as a comma-separated list.

For example, if the payload isa=hello&x=greeting&a=world, then the value ofrequest.formparam.a.values is['hello', 'world'].

Count of all values for the specified form parameter associated with the request.

The value of theNth particular form parameter in the message. For example, if the form string isa=hello&a=world, then the return value ofrequest.formparam.a.1 ishello.

Count of all parameters associated with the request sent from the client application.

A list of all parameter names associated with the request.

A comma-separated list of all form parameter names associated with the request.

The completeformparam in the request sent from the client app.

For example,name=test&type=first&group=A.

Applicable only when using a gRPC target server. The RPC name. For information on gRPC proxies, seeCreating gRPC API proxies.

Applicable only when using a gRPC target server. The gRPC status service name. For information on gRPC proxies, seeCreating gRPC API proxies.

Gets or sets the value of a particular header found in the request. If the header contains a comma, upon read you will receive only the segment of the text up to the first comma.

For example, if theCache-control header ispublic, maxage=16544, then the return value ofrequest.header.cache-control ispublic.

If you want the entire header as a string, use a variable likerequest.header.header_name.values.string.

The value of theNth particular header value in the request. Apigee splits header text values by commas. The index starts at 1 for the left-most value.

For example, if theCache-control header ispublic, maxage=16544, then the return value ofrequest.header.cache-control.2 ismaxage=16544.

All the values of a particular header in the request.

Count of all the values of a particular header in the request.

All the values of a particular header in the request, in the form of a single string.

For example, if theCache-control header ispublic, maxage=16544, then the return value ofrequest.header.cache-control.values.string ispublic, maxage=16544.

Count of all the headers in the request.

Names of all the headers in the request.

A comma-separated list of names of all the headers in the request.

The un-proxied resource path (not including the host) to the backend service, excluding query parameters.

For example, if the URI to the backend service ishttps://example.com/rest/api/latest, then the value ofrequest.path is/rest/api/latest.

The value of a particular query parameter found in the request.

The value of theNth query parameter in the request.

For example, if therequest.querystring isa=hello&a=world, then the return value of isrequest.queryparam.a.1 ishello.

As an example of writing multiple values for a single query parameter name, such astype=siteid:1&type=language:us-en&type=currency:USD, set the following:

• request.queryparam.type.1 tositeid:1
• request.queryparam.type.2 tolanguage:en-us
• request.queryparam.type.3 tocurrency:USD

All the values of a particular query parameter in the request, formatted as a comma-separated list.

For example, ifrequest.querystring isa=hello&b=lovely&a=world, then the value ofrequest.queryparam.a.values is['hello', 'world'].

The count of all the values of a particular query parameter in the request.

The count of all the query parameters in the request.

The names of all the query parameters in the request.

A comma-separated list of the names of all the query parameters in the request.

The complete list of query parameters in the request sent from the client app.

For example, if the request ishttp://host.com/123?name=first&surname=second&place=address, then this variable returnsname=first&surname=second&place=address.

ID of the request as type TransportMessage which is contextual.

Request of type TransportMessage which is contexual.

In an API proxy, the proxy<BasePath> in the ProxyEndpoint (in addition to the proxy's base URL) maps to the target service URL in the TargetEndpoint. For example:

<ProxyEndpoint>
...
  <BasePath>/my-mock-proxy</BasePath>

Points to

<TargetEndpoint>
...
  <HTTPTargetConnection>
    http://mocktarget.apigee.net
  </HTTPTargetConnection>

In therequest,request.uri is the proxy base path + the remainder of the address, including query parameters.

In theresponse,request.uri is the remainder of the address, including query parameters, after the HTTPTargetConnection.

The difference is because the original request came into the proxy, but then the proxy makes another request to the target service.

Let's say the following call is made to our sample proxy, which has a base path of/my-mock-proxy:

http://my_org-test.apigee.net/my-mock-proxy/user?user=Dude

And the proxy calls:

http://mocktarget.apigee.net

Which appends/user?user=Dude to that URL.

• Request:request.uri =/my-mock-proxy/user?user=Dude
• Response:request.uri =/user?user=Dude

The complete URL of the request made to the target endpoint, including the query string parameters, but not including the port number (if specified).

For example, if you make a call to a sample proxyhttp://my_org-test.apigee.net/my-mock-proxy/user?user=Dude, and the target endpoint ishttp://example.com:8080, then the value is:

• Request: n/a
• Response:http://example.com/user?user=Dude

The HTTP verb used for the request. For example,GET,PUT, andDELETE.

The HTTP version of the request. For example,1.1.

Complete response message returned by target.

Payload content of the response message returned by the target.

Base64-encoded payload content of the response message.

URL-safe base64-encoded payload content of the response message.

The content returned in an EventFlow streaming response. SeeStreaming server-sent events for more information.

Incrementally counts the number of response events sent. This value is updated for each received event. SeeStreaming server-sent events for more information.

Gets or sets the value of a specified HTTP header in the response.

If the header text includes a comma, Apigee infers multiple values. In this case,response.header.header_name returns the first value only.

For example, if theCache-control header ispublic,maxage=16544, then the return value ofresponse.header.cache-control ispublic.

If you want the entire header as a string, use a variable likeresponse.header.header_name.values.string.

All the values of a specified HTTP header in response.

Count of all the values of the specified HTTP header in response.

All the values of a particular header in the response, in the form of a single string.

For example, if theCache-control header ispublic,maxage=16544, then the return value ofresponse.header.cache-control.values.string ispublic,maxage=16544.

The value of theNth particular header value in the response. Apigee splits header text values by commas. The index starts at 1 for the left-most value.

For example, if theCache-control header ispublic,maxage=16544, thenresponse.header.cache-control.2 returnsmaxage=16544.

Count of all the headers in the response.

The names of all the headers in the response.

A comma-separated list of the names of all the headers in the response.

The response code returned for a request. You can use this variable to override the response status code, which is stored inmessage.status.code. For more, seemessage.

Response of type TransportMessage which is a contexual object.

The name of the<RouteRule> that was executed in the ProxyEndpoint. For example,default. A RouteRule references an API proxy TargetEndpoint to execute.

The name of the TargetEndpoint that was executed. For example,default.

The expected Common Name of the TargetEndpoint as referred to in aServiceCallout policy. This is meaningful only when the TargetEndpoint refers to an TLS/SSL endpoint.

The TargetEndpoint URL for a particularServiceCallout policy.

The TargetEndpoint URI for aServiceCallout policy. The URI is the TargetEndpoint URL without the protocol and domain specification.

IP address of the system.

The name of the pod where the proxy is running.

The name of the data center region where the proxy is running.

The time when this variable was read. For example, Wed, 21 Aug 2013 19:16:47 GMT.

This value is the string representation of the corresponding value ofsystem.timestamp. For example, Wed, 21 Aug 2013 19:16:47 GMT corresponds to the timestamp value of 1377112607413.

The year portion ofsystem.time.

The month portion ofsystem.time.

The day of month portion ofsystem.time.

The day of the week portion ofsystem.time.

The hour portion ofsystem.time.

The minute portion ofsystem.time.

The second portion ofsystem.time.

The millisecond portion ofsystem.time.

Timezone of the system.

The 64-bit (long) integer representing the time that this variable was read. The value is the number of milliseconds elapsed since midnight, on January 1, 1970 UTC. For example,1534783015000.

The UUID of the message processor handling the proxy.

The resource path (not including the domain) to the target service, excluding query parameters, that is defined in the proxy's TargetEndpoint.

For example, say an API proxy calls the following target:

<TargetEndpoint name="default">
...
  <HTTPTargetConnection>
    <URL>http://mocktarget.apigee.net/user?user=Dude</URL>
  </HTTPTargetConnection>

In this example, thetarget.basepath is/user.

If the target were this:

<TargetEndpoint name="default">
...
  <HTTPTargetConnection>
    <URL>http://mocktarget.apigee.net</URL>
  </HTTPTargetConnection>

Thetarget.basepath would be null.

Whentrue, the request forwarded from ProxyEndpoint to TargetEndpoint retains the path suffix (the URI path fragment following the URI defined in the ProxyEndpoint base path).

Whentrue, request forwarded from ProxyEndpoint to TargetEndpoint retains query parameters.

Country of the TLS/SSL certificate presented by the target server

The Common Name of the TargetEndpoint. This is meaningful only when the TargetEndpoint refers to an TLS/SSL endpoint.

Email address of the TLS/SSL certificate presented by the target server

The URL configured in the TargetEndpoint XML file or the dynamic target URL (iftarget.evaluated.url is set during the message flow). The variable does not include any additional path elements or query parameters. Returns null if called out of scope or otherwise unset.

You can use aJavaScript policy or anAssignMessage policy that uses theAssignVariable element to set this variable. Attach the policy to the TargetEndpoint Request flow.

The expected Common Name of the TargetEndpoint. This is meaningful only when the TargetEndpoint refers to an TLS/SSL endpoint.

The flow variable used by Apigee to set theHost header value for the outgoing request to the target. Used to set the value to a hostname in situations when an IP address is used in the Target URL or Target Server, as would be the case with a PSC Endpoint based target.

The domain name of the target service returning the response to the API proxy.

The IP address of the target service returning the response to the API proxy.

Locality (city) of the TLS/SSL certificate presented by the target server

Target to which message is reaching from targetendpoint.

Organization of the TLS/SSL certificate presented by the target server.

Organization unit of the TLS/SSL certificate presented by the target server.

The port number of the target service returning the response to the API proxy.

The time, expressed in string form, at which the TargetEndpoint finished receiving the response from the target. For example, Wed, 21 Aug 2013 19:16:47 UTC.

This time value is the string representation of the corresponding 32-bit timestamp quantity. For example, Wed, 21 Aug 2013 19:16:47 UTC corresponds to the timestamp value of 1377112607413..

The timestamp value specifying when the TargetEndpoint finished receiving the response from the target. For example,1534783015000. This value is a 64-bit (long) integer specifying the number of milliseconds elapsed since midnight, on January 1, 1970 UTC.

The time, expressed in string form, at which the TargetEndpoint started receiving the response from the target. For example, Wed, 21 Aug 2013 19:16:47 UTC.

This time value is the string representation of the corresponding 32-bit timestamp quantity. For example, Wed, 21 Aug 2013 19:16:47 UTC corresponds to the timestamp value of 1377112607413.

The timestamp value specifying when the TargetEndpoint started receiving the response from the target. For example,1534783015000. This value is a 64-bit (long) integer specifying the number of milliseconds elapsed since midnight, on January 1, 1970 UTC.

Scope begins: Target response
Type: String
Permission: Read/Write

Returns http or https depending on the request message.

The time, expressed in string form, at which the proxy stopped sending the request to the URL specified in the TargetEndpoint. For example, Wed, 21 Aug 2013 19:16:47 UTC.

This time value is the string representation of the corresponding 32-bit timestamp quantity. For example, Wed, 21 Aug 2013 19:16:47 UTC corresponds to the timestamp value of 1377112607413.

The timestamp value specifying when the proxy finished sending the request to the URL specified in the TargetEndpoint. For example, 1377112607413. This value is a 64-bit (long) integer containing the number of milliseconds elapsed since midnight, on January 1, 1970 UTC.

The time, expressed in string form, at which the proxy began sending the request to the URL specified in the TargetEndpoint. For example, Wed, 21 Aug 2013 19:16:47 UTC.

This time value is the string representation of the corresponding 32-bit timestamp quantity. For example, Wed, 21 Aug 2013 19:16:47 UTC corresponds to the timestamp value of 1377112607413.

The timestamp value specifying when the proxy started sending the request to the URL specified in the TargetEndpoint. For example,1534783015000. This value is a 64-bit (long) integer specifying the number of milliseconds elapsed since midnight, on January 1, 1970 UTC.

Whether TargetEndpoint is running on TLS/SSL.

State of the TLS/SSL certificate presented by the target server.

The URL configured in the TargetEndpoint XML file or the dynamic target URL (iftarget.url is set during the message flow). The variable does not include any additional path elements or query parameters. Returns null if called out of scope or otherwise unset.

You can use aJavaScript policy or anAssignMessage policy that uses theAssignVariable element to set this variable. Attach the policy to the TargetEndpoint Request flow.

Variable exposed for the common name if it's running on TLS/SSL.