
Connectors / Security and compliance · HTTP Connector
Automate Imperva Cloud WAF with Tray.ai
Add a site, create a policy and create a rule in Imperva Cloud WAF.
Thanks — someone from our team will be in touch soon.
What can you do with Imperva Cloud WAF on Tray.ai?
Imperva Cloud WAF is a cloud web application firewall that sits in front of websites to block attacks, bots and DDoS traffic. Tray.ai connects to Imperva Cloud WAF through the HTTP Connector, so your workflows can call the Imperva Cloud WAF API alongside the rest of your stack.
- Add a site to Imperva when a new web property is approved in your change management system.
- Create a rule to block a source IP flagged by your security team.
- Get a policy for each site and record it in your compliance tracker for audits.
- Delete a site in Imperva when the domain is retired in your asset inventory.
- Connects through
- HTTP Connector
- Authentication
- An API key in a request header
- Base URL
- https://api.imperva.com
Set it up
Connect Imperva Cloud WAF to Tray.ai
Each step uses Imperva Cloud WAF's own API details, from its documentation.
Step 1
Save Imperva Cloud WAF's API key
Save the key as a Tray.ai authentication. The HTTP Client puts it in the request header, read from $.auth. The key stays out of the workflow and out of the logs.
Step 2
Point the HTTP Client at the API
Add an HTTP Client step and use https://api.imperva.com as the base URL. Or paste a cURL example from Imperva Cloud WAF's API docs, and Tray.ai fills in the method, URL, and headers.
Step 3
Start with “List sites”
It's one of 19 documented actions, under Sites. The response comes back as data the next step can map into your other apps.
Step 4
Hand it to an AI agent
Wrap “Get a site” and “Add a site” in workflows, and Tray.ai's Agent Gateway for MCP publishes them as governed tools Claude and other AI agents can call.
What the Imperva Cloud WAF API covers
5 resources and 19 documented actions, each one a call the HTTP Connector can make from a Tray.ai workflow. Connecting it takes a few clicks: here's how.
Sites
- List sites
- Get a site
- Add a site
- Onboard a site
- Delete a site
Policies
- List policies
- Get a policy
- Create a policy
- Update a policy
- Delete a policy
Custom rules
- Create a rule
- Get a rule
- Update a rule
- Delete a rule
Attack incidents
- List incidents
- Get incident details
- List insights
Audit events
- List audit events
- Get site statistics
Checked against Imperva Cloud WAF's own documentation on 2026-10-22
How Tray.ai makes this work
Imperva Cloud WAF plugs into the whole Tray.ai platform
Intelligent Integration
Integrate and automate across 9,000+ apps, databases, APIs, and services with visual workflows, error handling, and observability.
Learn more →Agent Builder
Build AI agents that read, write, and take action in Imperva Cloud WAF — with guardrails, audit, and human-in-the-loop.
Learn more →Agent Gateway for MCP
Expose Imperva Cloud WAF actions as governed MCP tools — observable, rate-limited, authenticated.
Learn more →Tray Helix
Build apps on Imperva Cloud WAF data with your AI assistant, then deploy, run, and govern them on Tray.ai.
Learn more →More security and compliance apps on Tray.ai
Dedicated connectors and other apps Tray.ai reaches in the same category. See every security and compliance connector →
Frequently asked questions
What can a Tray.ai workflow do in Imperva Cloud WAF?
+
The Imperva Cloud WAF API documents 19 actions across 5 resources (Sites, Policies, Custom rules, Attack incidents, Audit events). For example: List sites; List policies; Create a rule. A workflow can make any documented call through the HTTP Connector.
How does Tray.ai authenticate with Imperva Cloud WAF?
+
The Imperva Cloud WAF API uses an API key in a request header. You save it once as a Tray.ai authentication, and the HTTP Connector adds it to every request.
See Imperva Cloud WAF working against your stack.
We'll walk through a tailored demo with your systems plugged in.
Thanks — someone from our team will be in touch soon.