# HTTP / HTTPS Methods Needed for Orchestrator

**URL:** <https://forum.uipath.com/t/http-https-methods-needed-for-orchestrator/541354>\
**Category:** Knowledge Base\
**Tags:** 2021\_10\_3, orchestrator\
**Created:** [May 3, 2023, 12:58pm UTC](https://forum.uipath.com/t/http-https-methods-needed-for-orchestrator/541354 "2023-05-03T12:58:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://sea2.discourse-cdn.com/uipath/user_avatar/forum.uipath.com/system/32/182466_2.png) [@system](https://forum.uipath.com/u/system)\
**Post date:** [May 3, 2023, 12:58pm UTC](https://forum.uipath.com/t/http-https-methods-needed-for-orchestrator/541354/1 "2023-05-03T12:58:41Z")

</div>

# Which HTTP/HTTPS methods are required by Orchestrator? OR Which HTTP/HTTPS methods are not used by Orchestrator?

**Issue description:**

Which HTTP / HTTPS methods are not needed by Orchestrator? (like GET, POST, PUT, TRACE, OPTIONS, etc). Is there a list, of which HTTP methods are strictly necessary for the functioning of Orchestrator?

**Resolution:**

- Sometimes, security scans may show the Orchestrator server allowing many HTTP methods. However, not all of them are necessary.
- The used methods can be found in: "C:\Program Files (x86)\UiPath\Orchestrator\Web.config". See below for reference.

```
<add verb="GET" allowed="true" />
      <add verb="HEAD" allowed="true" />
      <add verb="POST" allowed="true" />
      <add verb="PUT" allowed="true" />
      <add verb="PATCH" allowed="true" />
      <add verb="DELETE" allowed="true" />
      <add verb="OPTIONS" allowed="true" />
```