Cloudflare Agentic Access
Cloudflare exposes 5254 API operations that an AI agent could call, of which 2628 are state-changing ‘acting’ operations. This is a recommended x-agentic-access execution contract — the scope, audience, consequence tier, short-lived token constraints, and escalation each action should carry before it is handed to an autonomous agent.
By consequence: 2626 read, 2412 write, 110 physical, and 106 safety-critical.
106 operations are classed safety-critical and should require human-in-the-loop approval at runtime.
Contracts are classified heuristically from the provider’s OpenAPI and refresh on every APIs.io network build; audience is bound per deployment. The model follows Curity’s Access Intelligence (apidays Munich 2026). Browse every provider’s agent contracts at agentic-access.apis.io.
By consequence
Highest-consequence actions
The physical and safety-critical operations an agent could invoke — the ones that most warrant scoped tokens, tight TTLs, and escalation. Full per-operation contracts are in the source below.
| Method | Path | Consequence | Human-in-loop |
|---|---|---|---|
| POST | /accounts/{account_id}/access/ai-controls/mcp/portals | safety-critical | required |
| DELETE | /accounts/{account_id}/access/ai-controls/mcp/portals/{id} | safety-critical | required |
| PUT | /accounts/{account_id}/access/ai-controls/mcp/portals/{id} | safety-critical | required |
| POST | /accounts/{account_id}/access/ai-controls/mcp/servers | safety-critical | required |
| DELETE | /accounts/{account_id}/access/ai-controls/mcp/servers/{id} | safety-critical | required |
| PUT | /accounts/{account_id}/access/ai-controls/mcp/servers/{id} | safety-critical | required |
| POST | /accounts/{account_id}/access/ai-controls/mcp/servers/{id}/sync | safety-critical | required |
| POST | /accounts/{account_id}/access/apps/{app_id}/revoke_tokens | safety-critical | required |
| POST | /accounts/{account_id}/access/organizations/revoke_user | safety-critical | required |
| DELETE | /accounts/{account_id}/artifacts/namespaces/{namespace}/tokens/{id} | safety-critical | required |
| POST | /accounts/{account_id}/basin-catalog/{bucket_name}/disable | safety-critical | required |
| POST | /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/skills/{skill_id}/run | safety-critical | required |
| PUT | /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}/skills | safety-critical | required |
| POST | /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills | safety-critical | required |
| DELETE | /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id} | safety-critical | required |
| PATCH | /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id} | safety-critical | required |
| PUT | /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}/tag-categories | safety-critical | required |
| POST | /accounts/{account_id}/data-security/posture/findings/{finding_id}/reset_finding_severity | safety-critical | required |
| POST | /accounts/{account_id}/devices/override_codes | safety-critical | required |
| POST | /accounts/{account_id}/devices/physical-devices/{device_id}/revoke | safety-critical | required |
| DELETE | /accounts/{account_id}/devices/policy/exclude | safety-critical | required |
| DELETE | /accounts/{account_id}/devices/policy/fallback_domains | safety-critical | required |
| DELETE | /accounts/{account_id}/devices/policy/{policy_id}/exclude | safety-critical | required |
| DELETE | /accounts/{account_id}/devices/policy/{policy_id}/fallback_domains | safety-critical | required |
| POST | /accounts/{account_id}/devices/registrations/revoke | safety-critical | required |
Source
Agentic Access
generated: '2026-10-17'
method: generated
source: openapi/cloudflare-access-application-scoped-policies-api-openapi.yml, openapi/cloudflare-access-applications-api-openapi.yml,
openapi/cloudflare-access-authentication-logs-api-openapi.yml, openapi/cloudflare-access-authenticator-device-aaguids-api-openapi.yml,
openapi/cloudflare-access-bookmark-applications-deprecated-api-openapi.yml, openapi/cloudflare-access-custom-pages-api-openapi.yml,
openapi/cloudflare-access-groups-api-openapi.yml, openapi/cloudflare-access-identity-providers-api-openapi.yml,
openapi/cloudflare-access-idp-federation-grants-api-openapi.yml, openapi/cloudflare-access-jit-request-logs-api-openapi.yml,
openapi/cloudflare-access-key-configuration-api-openapi.yml, openapi/cloudflare-access-mtls-authentication-api-openapi.yml,
openapi/cloudflare-access-policy-tester-api-openapi.yml, openapi/cloudflare-access-reusable-policies-api-openapi.yml,
openapi/cloudflare-access-saml-encryption-certificates-api-openapi.yml, openapi/cloudflare-access-scim-update-logs-api-openapi.yml,
openapi/cloudflare-access-service-tokens-api-openapi.yml, openapi/cloudflare-access-short-lived-certificate-cas-api-openapi.yml,
openapi/cloudflare-access-tags-api-openapi.yml, openapi/cloudflare-access-user-populations-api-openapi.yml,
openapi/cloudflare-account-api-openapi.yml, openapi/cloudflare-account-billing-api-openapi.yml,
openapi/cloudflare-account-billing-history-api-openapi.yml, openapi/cloudflare-account-billing-profile-api-openapi.yml,
openapi/cloudflare-account-entitlements-api-openapi.yml, openapi/cloudflare-account-level-custom-nameservers-api-openapi.yml,
openapi/cloudflare-account-level-custom-nameservers-usage-for-a-zone-api-openapi.yml, openapi/cloudflare-account-load-balancer-monitor-groups-api-openapi.yml,
openapi/cloudflare-account-load-balancer-monitors-api-openapi.yml, openapi/cloudflare-account-load-balancer-pools-api-openapi.yml,
openapi/cloudflare-account-load-balancer-search-api-openapi.yml, openapi/cloudflare-account-load-balancers-api-openapi.yml,
openapi/cloudflare-account-members-api-openapi.yml, openapi/cloudflare-account-owned-api-tokens-api-openapi.yml,
openapi/cloudflare-account-payment-methods-api-openapi.yml, openapi/cloudflare-account-permission-groups-api-openapi.yml,
openapi/cloudflare-account-request-tracer-api-openapi.yml, openapi/cloudflare-account-resource-groups-api-openapi.yml,
openapi/cloudflare-account-roles-api-openapi.yml, openapi/cloudflare-account-rulesets-api-openapi.yml,
openapi/cloudflare-account-settings-api-openapi.yml, openapi/cloudflare-account-subscriptions-api-openapi.yml,
openapi/cloudflare-account-user-group-members-api-openapi.yml, openapi/cloudflare-account-user-groups-api-openapi.yml,
openapi/cloudflare-accounts-api-openapi.yml, openapi/cloudflare-active-session-api-openapi.yml,
openapi/cloudflare-ai-audit-api-openapi.yml, openapi/cloudflare-ai-gateway-api-openapi.yml,
openapi/cloudflare-ai-gateway-custom-domains-api-openapi.yml, openapi/cloudflare-ai-gateway-custom-provider-costs-api-openapi.yml,
openapi/cloudflare-ai-gateway-custom-providers-api-openapi.yml, openapi/cloudflare-ai-gateway-datasets-api-openapi.yml,
openapi/cloudflare-ai-gateway-dynamic-routes-api-openapi.yml, openapi/cloudflare-ai-gateway-evaluations-api-openapi.yml,
openapi/cloudflare-ai-gateway-gateways-api-openapi.yml, openapi/cloudflare-ai-gateway-logs-api-openapi.yml,
openapi/cloudflare-ai-gateway-provider-configs-api-openapi.yml, openapi/cloudflare-ai-inference-api-openapi.yml,
openapi/cloudflare-ai-search-account-search-api-openapi.yml, openapi/cloudflare-ai-search-instances-api-openapi.yml,
openapi/cloudflare-ai-search-instances-items-api-openapi.yml, openapi/cloudflare-ai-search-instances-jobs-api-openapi.yml,
openapi/cloudflare-ai-search-namespaces-api-openapi.yml, openapi/cloudflare-ai-search-tokens-api-openapi.yml,
openapi/cloudflare-ai-security-for-apps-api-openapi.yml, openapi/cloudflare-analytics-api-openapi.yml,
openapi/cloudflare-analytics-engine-api-openapi.yml, openapi/cloudflare-analytics-sql-api-openapi.yml,
openapi/cloudflare-analyze-certificate-api-openapi.yml, openapi/cloudflare-api-shield-api-discovery-api-openapi.yml,
openapi/cloudflare-api-shield-client-certificates-for-a-zone-api-openapi.yml, openapi/cloudflare-api-shield-endpoint-management-api-openapi.yml,
openapi/cloudflare-api-shield-labels-api-openapi.yml, openapi/cloudflare-api-shield-schema-validation-2-0-api-openapi.yml,
openapi/cloudflare-api-shield-settings-api-openapi.yml, openapi/cloudflare-api-shield-waf-expression-templates-api-openapi.yml,
openapi/cloudflare-applications-api-openapi.yml, openapi/cloudflare-approvals-api-openapi.yml,
openapi/cloudflare-apps-api-openapi.yml, openapi/cloudflare-argo-analytics-for-geolocation-api-openapi.yml,
openapi/cloudflare-argo-analytics-for-zone-api-openapi.yml, openapi/cloudflare-argo-smart-routing-api-openapi.yml,
openapi/cloudflare-art-analytics-api-openapi.yml, openapi/cloudflare-artifacts-api-openapi.yml,
openapi/cloudflare-asn-intelligence-api-openapi.yml, openapi/cloudflare-attacker-api-openapi.yml,
openapi/cloudflare-audit-logs-api-openapi.yml, openapi/cloudflare-automatic-ssl-tls-api-openapi.yml,
openapi/cloudflare-autorag-jobs-api-openapi.yml, openapi/cloudflare-autorag-rag-api-openapi.yml,
openapi/cloudflare-autorag-rag-search-api-openapi.yml, openapi/cloudflare-available-page-rules-settings-api-openapi.yml,
openapi/cloudflare-basin-catalog-management-api-openapi.yml, openapi/cloudflare-billable-usage-api-openapi.yml,
openapi/cloudflare-billable-usage-v2-api-openapi.yml, openapi/cloudflare-bindb-api-openapi.yml,
openapi/cloudflare-bot-settings-api-openapi.yml, openapi/cloudflare-botnet-threat-feed-api-openapi.yml,
openapi/cloudflare-brand-protection-api-openapi.yml, openapi/cloudflare-brapi-api-openapi.yml,
openapi/cloudflare-browser-extension-config-api-openapi.yml, openapi/cloudflare-browser-extension-inventories-api-openapi.yml,
openapi/cloudflare-buckets-api-openapi.yml, openapi/cloudflare-build-tokens-api-openapi.yml,
openapi/cloudflare-builds-api-openapi.yml, openapi/cloudflare-bulk-operations-api-openapi.yml,
openapi/cloudflare-cache-reserve-clear-api-openapi.yml, openapi/cloudflare-catalog-sync-api-openapi.yml,
openapi/cloudflare-category-api-openapi.yml, openapi/cloudflare-certificate-packs-api-openapi.yml,
openapi/cloudflare-certificates-api-openapi.yml, openapi/cloudflare-changelog-api-openapi.yml,
openapi/cloudflare-client-side-security-api-openapi.yml, openapi/cloudflare-client-versions-api-openapi.yml,
openapi/cloudflare-cloud-integrations-api-openapi.yml, openapi/cloudflare-cloudflare-images-api-openapi.yml,
openapi/cloudflare-cloudflare-images-keys-api-openapi.yml, openapi/cloudflare-cloudflare-images-sourcing-kit-api-openapi.yml,
openapi/cloudflare-cloudflare-images-variants-api-openapi.yml, openapi/cloudflare-cloudflare-ips-api-openapi.yml,
openapi/cloudflare-cloudflare-tunnel-api-openapi.yml, openapi/cloudflare-cloudflare-tunnel-configuration-api-openapi.yml,
openapi/cloudflare-cnis-api-openapi.yml, openapi/cloudflare-collections-api-openapi.yml, openapi/cloudflare-collections-items-api-openapi.yml,
openapi/cloudflare-communication-preferences-api-openapi.yml, openapi/cloudflare-configuration-api-openapi.yml,
openapi/cloudflare-configurations-api-openapi.yml, openapi/cloudflare-connectivity-services-api-openapi.yml,
openapi/cloudflare-consumers-api-openapi.yml, openapi/cloudflare-container-images-api-openapi.yml,
openapi/cloudflare-container-instances-api-openapi.yml, openapi/cloudflare-content-api-openapi.yml,
openapi/cloudflare-content-scanning-api-openapi.yml, openapi/cloudflare-country-api-openapi.yml,
openapi/cloudflare-credential-management-api-openapi.yml, openapi/cloudflare-credential-sets-api-openapi.yml,
openapi/cloudflare-credentials-api-openapi.yml, openapi/cloudflare-csam-scanner-settings-api-openapi.yml,
openapi/cloudflare-ct-alerting-api-openapi.yml, openapi/cloudflare-custom-assets-for-a-zone-api-openapi.yml,
openapi/cloudflare-custom-assets-for-an-account-api-openapi.yml, openapi/cloudflare-custom-csrs-for-a-zone-api-openapi.yml,
openapi/cloudflare-custom-csrs-for-an-account-api-openapi.yml, openapi/cloudflare-custom-hostname-fallback-origin-for-a-zone-api-openapi.yml,
openapi/cloudflare-custom-hostname-for-a-zone-api-openapi.yml, openapi/cloudflare-custom-indicator-feeds-api-openapi.yml,
openapi/cloudflare-custom-nameserver-sets-for-an-account-api-openapi.yml, openapi/cloudflare-custom-origin-trust-store-api-openapi.yml,
openapi/cloudflare-custom-pages-for-a-zone-api-openapi.yml, openapi/cloudflare-custom-pages-for-an-account-api-openapi.yml,
openapi/cloudflare-custom-ssl-for-a-zone-api-openapi.yml, openapi/cloudflare-d1-api-openapi.yml,
openapi/cloudflare-dashboard-assets-api-openapi.yml, openapi/cloudflare-dashboard-users-api-openapi.yml,
openapi/cloudflare-data-security-api-openapi.yml, openapi/cloudflare-databases-api-openapi.yml,
openapi/cloudflare-dataset-api-openapi.yml, openapi/cloudflare-datasets-api-openapi.yml, openapi/cloudflare-dcv-delegation-api-openapi.yml,
openapi/cloudflare-definitions-api-openapi.yml, openapi/cloudflare-deploy-hooks-api-openapi.yml,
openapi/cloudflare-deployment-groups-api-openapi.yml, openapi/cloudflare-deployments-api-openapi.yml,
openapi/cloudflare-destinations-api-openapi.yml, openapi/cloudflare-device-managed-networks-api-openapi.yml,
openapi/cloudflare-device-posture-integrations-api-openapi.yml, openapi/cloudflare-device-posture-rules-api-openapi.yml,
openapi/cloudflare-devices-api-openapi.yml, openapi/cloudflare-devices-resilience-api-openapi.yml,
openapi/cloudflare-dex-remote-commands-api-openapi.yml, openapi/cloudflare-dex-rules-api-openapi.yml,
openapi/cloudflare-dex-synthetic-application-monitoring-api-openapi.yml, openapi/cloudflare-diagnostics-api-openapi.yml,
openapi/cloudflare-direct-uploads-api-openapi.yml, openapi/cloudflare-dlp-custom-prompt-topics-api-openapi.yml,
openapi/cloudflare-dlp-data-classes-api-openapi.yml, openapi/cloudflare-dlp-data-tag-categories-api-openapi.yml,
openapi/cloudflare-dlp-data-tag-category-templates-api-openapi.yml, openapi/cloudflare-dlp-data-tags-api-openapi.yml,
openapi/cloudflare-dlp-datasets-api-openapi.yml, openapi/cloudflare-dlp-document-fingerprints-api-openapi.yml,
openapi/cloudflare-dlp-email-api-openapi.yml, openapi/cloudflare-dlp-entries-api-openapi.yml,
openapi/cloudflare-dlp-integration-entries-api-openapi.yml, openapi/cloudflare-dlp-predefined-entries-api-openapi.yml,
openapi/cloudflare-dlp-profiles-api-openapi.yml, openapi/cloudflare-dlp-sensitivity-group-templates-api-openapi.yml,
openapi/cloudflare-dlp-sensitivity-groups-api-openapi.yml, openapi/cloudflare-dlp-sensitivity-levels-api-openapi.yml,
openapi/cloudflare-dlp-settings-api-openapi.yml, openapi/cloudflare-dls-regional-services-api-openapi.yml,
openapi/cloudflare-dns-analytics-api-openapi.yml, openapi/cloudflare-dns-batch-operations-api-openapi.yml,
openapi/cloudflare-dns-firewall-analytics-api-openapi.yml, openapi/cloudflare-dns-firewall-api-openapi.yml,
openapi/cloudflare-dns-internal-views-for-an-account-api-openapi.yml, openapi/cloudflare-dns-record-import-export-api-openapi.yml,
openapi/cloudflare-dns-record-scanning-api-openapi.yml, openapi/cloudflare-dns-records-api-openapi.yml,
openapi/cloudflare-dns-records-for-a-zone-api-openapi.yml, openapi/cloudflare-dns-records-for-an-account-api-openapi.yml,
openapi/cloudflare-dns-settings-for-a-zone-api-openapi.yml, openapi/cloudflare-dns-settings-for-an-account-api-openapi.yml,
openapi/cloudflare-dnssec-api-openapi.yml, openapi/cloudflare-domain-discovery-api-openapi.yml,
openapi/cloudflare-domain-history-api-openapi.yml, openapi/cloudflare-domain-intelligence-api-openapi.yml,
openapi/cloudflare-domain-search-api-openapi.yml, openapi/cloudflare-domains-api-openapi.yml,
openapi/cloudflare-dos-flowtrackd-api-other-api-openapi.yml, openapi/cloudflare-durable-objects-namespace-api-openapi.yml,
openapi/cloudflare-email-auth-api-openapi.yml, openapi/cloudflare-email-routing-destination-addresses-api-openapi.yml,
openapi/cloudflare-email-routing-routing-rules-api-openapi.yml, openapi/cloudflare-email-routing-settings-api-openapi.yml,
openapi/cloudflare-email-routing-suppressions-api-openapi.yml, openapi/cloudflare-email-security-analytics-api-openapi.yml,
openapi/cloudflare-email-security-api-openapi.yml, openapi/cloudflare-email-security-settings-api-openapi.yml,
openapi/cloudflare-email-sending-api-openapi.yml, openapi/cloudflare-email-sending-subdomains-api-openapi.yml,
openapi/cloudflare-email-sending-suppressions-api-openapi.yml, openapi/cloudflare-endpoint-health-checks-api-openapi.yml,
openapi/cloudflare-environment-variables-api-openapi.yml, openapi/cloudflare-evaluation-api-openapi.yml,
openapi/cloudflare-event-api-openapi.yml, openapi/cloudflare-events-api-openapi.yml, openapi/cloudflare-exports-api-openapi.yml,
openapi/cloudflare-extension-api-openapi.yml, openapi/cloudflare-feedback-api-openapi.yml,
openapi/cloudflare-field-extractors-api-openapi.yml, openapi/cloudflare-filters-api-openapi.yml,
openapi/cloudflare-finding-types-api-openapi.yml, openapi/cloudflare-findings-api-openapi.yml,
openapi/cloudflare-finetune-asset-api-openapi.yml, openapi/cloudflare-firewall-rules-api-openapi.yml,
openapi/cloudflare-flags-api-openapi.yml, openapi/cloudflare-fraud-detection-api-openapi.yml,
openapi/cloudflare-gateway-ca-api-openapi.yml, openapi/cloudflare-gateways-api-openapi.yml,
openapi/cloudflare-github-integration-api-openapi.yml, openapi/cloudflare-google-tag-gateway-api-openapi.yml,
openapi/cloudflare-groups-api-openapi.yml, openapi/cloudflare-health-api-openapi.yml, openapi/cloudflare-health-checks-api-openapi.yml,
openapi/cloudflare-hyperdrive-api-openapi.yml, openapi/cloudflare-image-registries-api-openapi.yml,
openapi/cloudflare-images-api-openapi.yml, openapi/cloudflare-import-export-api-openapi.yml,
openapi/cloudflare-indexes-api-openapi.yml, openapi/cloudflare-indicator-api-openapi.yml,
openapi/cloudflare-indicator-types-api-openapi.yml, openapi/cloudflare-indicators-api-openapi.yml,
openapi/cloudflare-infrastructure-access-targets-api-openapi.yml, openapi/cloudflare-instant-logs-jobs-for-a-zone-api-openapi.yml,
openapi/cloudflare-integrations-api-openapi.yml, openapi/cloudflare-interconnects-api-openapi.yml,
openapi/cloudflare-ip-access-rules-for-a-user-api-openapi.yml, openapi/cloudflare-ip-access-rules-for-a-zone-api-openapi.yml,
openapi/cloudflare-ip-access-rules-for-an-account-api-openapi.yml, openapi/cloudflare-ip-address-management-address-maps-api-openapi.yml,
openapi/cloudflare-ip-address-management-bgp-prefixes-api-openapi.yml, openapi/cloudflare-ip-address-management-dynamic-advertisement-api-openapi.yml,
openapi/cloudflare-ip-address-management-leases-api-openapi.yml, openapi/cloudflare-ip-address-management-prefix-delegation-api-openapi.yml,
openapi/cloudflare-ip-address-management-prefixes-api-openapi.yml, openapi/cloudflare-ip-address-management-service-bindings-api-openapi.yml,
openapi/cloudflare-ip-intelligence-api-openapi.yml, openapi/cloudflare-ip-list-api-openapi.yml,
openapi/cloudflare-ip-profiles-api-openapi.yml, openapi/cloudflare-ips-api-openapi.yml, openapi/cloudflare-issues-api-openapi.yml,
openapi/cloudflare-key-value-pairs-api-openapi.yml, openapi/cloudflare-keyless-ssl-for-a-zone-api-openapi.yml,
openapi/cloudflare-keys-api-openapi.yml, openapi/cloudflare-leaked-credential-checks-api-openapi.yml,
openapi/cloudflare-lists-api-openapi.yml, openapi/cloudflare-live-inputs-api-openapi.yml,
openapi/cloudflare-live-streams-api-openapi.yml, openapi/cloudflare-live-tail-api-openapi.yml,
openapi/cloudflare-livestreamanalytics-api-openapi.yml, openapi/cloudflare-load-balancer-healthcheck-events-api-openapi.yml,
openapi/cloudflare-load-balancer-monitors-api-openapi.yml, openapi/cloudflare-load-balancer-pools-api-openapi.yml,
openapi/cloudflare-load-balancer-regions-api-openapi.yml, openapi/cloudflare-load-balancers-api-openapi.yml,
openapi/cloudflare-log-explorer-datasets-api-openapi.yml, openapi/cloudflare-log-explorer-queries-api-openapi.yml,
openapi/cloudflare-logcontrol-cmb-config-for-an-account-api-openapi.yml, openapi/cloudflare-logo-match-api-openapi.yml,
openapi/cloudflare-logpull-api-openapi.yml, openapi/cloudflare-logpush-jobs-for-a-zone-api-openapi.yml,
openapi/cloudflare-logpush-jobs-for-an-account-api-openapi.yml, openapi/cloudflare-logpush-transformers-api-openapi.yml,
openapi/cloudflare-logs-api-openapi.yml, openapi/cloudflare-logs-received-api-openapi.yml,
openapi/cloudflare-magic-account-apps-api-openapi.yml, openapi/cloudflare-magic-bgp-filter-profiles-api-openapi.yml,
openapi/cloudflare-magic-bgp-settings-api-openapi.yml, openapi/cloudflare-magic-cf1-site-ramps-api-openapi.yml,
openapi/cloudflare-magic-cf1-sites-api-openapi.yml, openapi/cloudflare-magic-connectors-api-openapi.yml,
openapi/cloudflare-magic-gre-tunnels-api-openapi.yml, openapi/cloudflare-magic-interconnects-api-openapi.yml,
openapi/cloudflare-magic-ipsec-tunnels-api-openapi.yml, openapi/cloudflare-magic-network-monitoring-configuration-api-openapi.yml,
openapi/cloudflare-magic-network-monitoring-rules-api-openapi.yml, openapi/cloudflare-magic-network-monitoring-vpc-flow-logs-api-openapi.yml,
openapi/cloudflare-magic-pcap-collection-api-openapi.yml, openapi/cloudflare-magic-redundancy-groups-api-openapi.yml,
openapi/cloudflare-magic-site-acls-api-openapi.yml, openapi/cloudflare-magic-site-app-configs-api-openapi.yml,
openapi/cloudflare-magic-site-lans-api-openapi.yml, openapi/cloudflare-magic-site-netflow-config-api-openapi.yml,
openapi/cloudflare-magic-site-wans-api-openapi.yml, openapi/cloudflare-magic-sites-api-openapi.yml,
openapi/cloudflare-magic-static-routes-api-openapi.yml, openapi/cloudflare-maintenance-configuration-api-openapi.yml,
openapi/cloudflare-managed-transforms-api-openapi.yml, openapi/cloudflare-mcp-portal-analytics-api-openapi.yml,
openapi/cloudflare-mcp-portal-api-openapi.yml, openapi/cloudflare-mcp-portal-servers-api-openapi.yml,
openapi/cloudflare-meetings-api-openapi.yml, openapi/cloudflare-memberships-api-openapi.yml,
openapi/cloudflare-memory-api-openapi.yml, openapi/cloudflare-messages-api-openapi.yml, openapi/cloudflare-metadata-api-openapi.yml,
openapi/cloudflare-metrics-export-api-openapi.yml, openapi/cloudflare-miscategorization-api-openapi.yml,
openapi/cloudflare-monetization-api-openapi.yml, openapi/cloudflare-moq-relays-api-openapi.yml,
openapi/cloudflare-mtls-certificate-management-api-openapi.yml, openapi/cloudflare-namespace-management-api-openapi.yml,
openapi/cloudflare-namespaces-api-openapi.yml, openapi/cloudflare-nel-settings-api-openapi.yml,
openapi/cloudflare-notification-alert-types-api-openapi.yml, openapi/cloudflare-notification-destinations-with-pagerduty-api-openapi.yml,
openapi/cloudflare-notification-history-api-openapi.yml, openapi/cloudflare-notification-mechanism-eligibility-api-openapi.yml,
openapi/cloudflare-notification-policies-api-openapi.yml, openapi/cloudflare-notification-silences-api-openapi.yml,
openapi/cloudflare-notification-webhooks-api-openapi.yml, openapi/cloudflare-oauth-clients-api-openapi.yml,
openapi/cloudflare-objects-api-openapi.yml, openapi/cloudflare-observability-api-openapi.yml,
openapi/cloudflare-observatory-api-openapi.yml, openapi/cloudflare-on-ramps-api-openapi.yml,
openapi/cloudflare-openai-compatible-api-openapi.yml, openapi/cloudflare-organization-members-api-openapi.yml,
openapi/cloudflare-organizations-api-openapi.yml, openapi/cloudflare-origin-ca-api-openapi.yml,
openapi/cloudflare-origin-cloud-regions-api-openapi.yml, openapi/cloudflare-origin-post-quantum-api-openapi.yml,
openapi/cloudflare-origin-tls-api-openapi.yml, openapi/cloudflare-override-codes-api-openapi.yml,
openapi/cloudflare-page-rules-api-openapi.yml, openapi/cloudflare-pages-assets-api-openapi.yml,
openapi/cloudflare-pages-build-cache-api-openapi.yml, openapi/cloudflare-pages-deployment-api-openapi.yml,
openapi/cloudflare-pages-domains-api-openapi.yml, openapi/cloudflare-pages-project-api-openapi.yml,
openapi/cloudflare-passive-dns-by-ip-api-openapi.yml, openapi/cloudflare-per-hostname-authenticated-origin-pull-api-openapi.yml,
openapi/cloudflare-per-hostname-tls-settings-api-openapi.yml, openapi/cloudflare-permissions-api-openapi.yml,
openapi/cloudflare-physical-devices-api-openapi.yml, openapi/cloudflare-policies-api-openapi.yml,
openapi/cloudflare-ppc-config-api-openapi.yml, openapi/cloudflare-ppc-crawlers-api-openapi.yml,
openapi/cloudflare-ppc-stripe-api-openapi.yml, openapi/cloudflare-ppc-terms-api-openapi.yml,
openapi/cloudflare-ppu-configuration-api-openapi.yml, openapi/cloudflare-ppu-enabled-domains-api-openapi.yml,
openapi/cloudflare-ppu-pricing-api-openapi.yml, openapi/cloudflare-ppu-usage-reports-api-openapi.yml,
openapi/cloudflare-ppu-usage-stats-api-openapi.yml, openapi/cloudflare-precursor-api-openapi.yml,
openapi/cloudflare-prefix-bindings-api-openapi.yml, openapi/cloudflare-presets-api-openapi.yml,
openapi/cloudflare-preview-deployments-api-openapi.yml, openapi/cloudflare-previews-api-openapi.yml,
openapi/cloudflare-priority-intelligence-requirements-api-openapi.yml, openapi/cloudflare-priority-intelligence-requirements-pir-api-openapi.yml,
openapi/cloudflare-public-credential-monitor-api-openapi.yml, openapi/cloudflare-purge-api-openapi.yml,
openapi/cloudflare-queries-api-openapi.yml, openapi/cloudflare-query-api-openapi.yml, openapi/cloudflare-query-run-api-openapi.yml,
openapi/cloudflare-queue-api-openapi.yml, openapi/cloudflare-queues-api-openapi.yml, openapi/cloudflare-r2-account-api-openapi.yml,
openapi/cloudflare-r2-bucket-api-openapi.yml, openapi/cloudflare-r2-catalog-api-openapi.yml,
openapi/cloudflare-r2-catalog-management-api-openapi.yml, openapi/cloudflare-r2-object-api-openapi.yml,
openapi/cloudflare-r2-super-slurper-api-openapi.yml, openapi/cloudflare-radar-agent-readiness-api-openapi.yml,
openapi/cloudflare-radar-ai-bots-api-openapi.yml, openapi/cloudflare-radar-ai-inference-api-openapi.yml,
openapi/cloudflare-radar-annotations-api-openapi.yml, openapi/cloudflare-radar-api-openapi.yml,
openapi/cloudflare-radar-as112-api-openapi.yml, openapi/cloudflare-radar-autonomous-systems-api-openapi.yml,
openapi/cloudflare-radar-bgp-api-openapi.yml, openapi/cloudflare-radar-bots-api-openapi.yml,
openapi/cloudflare-radar-certificate-transparency-api-openapi.yml, openapi/cloudflare-radar-datasets-api-openapi.yml,
openapi/cloudflare-radar-dns-api-openapi.yml, openapi/cloudflare-radar-domains-ranking-api-openapi.yml,
openapi/cloudflare-radar-email-routing-api-openapi.yml, openapi/cloudflare-radar-email-security-api-openapi.yml,
openapi/cloudflare-radar-geolocations-api-openapi.yml, openapi/cloudflare-radar-http-api-openapi.yml,
openapi/cloudflare-radar-internet-services-ranking-api-openapi.yml, openapi/cloudflare-radar-ip-api-openapi.yml,
openapi/cloudflare-radar-layer-3-attacks-api-openapi.yml, openapi/cloudflare-radar-layer-7-attacks-api-openapi.yml,
openapi/cloudflare-radar-leaked-credential-checks-api-openapi.yml, openapi/cloudflare-radar-locations-api-openapi.yml,
openapi/cloudflare-radar-markdown-for-agents-api-openapi.yml, openapi/cloudflare-radar-netflows-api-openapi.yml,
openapi/cloudflare-radar-origins-api-openapi.yml, openapi/cloudflare-radar-post-quantum-api-openapi.yml,
openapi/cloudflare-radar-quality-api-openapi.yml, openapi/cloudflare-radar-robots-txt-api-openapi.yml,
openapi/cloudflare-radar-search-api-openapi.yml, openapi/cloudflare-radar-tcp-resets-and-timeouts-api-openapi.yml,
openapi/cloudflare-radar-top-level-domains-api-openapi.yml, openapi/cloudflare-radar-traffic-anomalies-api-openapi.yml,
openapi/cloudflare-radar-verified-bots-api-openapi.yml, openapi/cloudflare-radar-web-crawlers-api-openapi.yml,
openapi/cloudflare-rate-limiting-analytics-api-openapi.yml, openapi/cloudflare-rate-limits-for-a-zone-api-openapi.yml,
openapi/cloudflare-rate-plans-api-openapi.yml, openapi/cloudflare-realtime-sfu-apps-api-openapi.yml,
openapi/cloudflare-realtime-turn-keys-api-openapi.yml, openapi/cloudflare-recordings-api-openapi.yml,
openapi/cloudflare-regions-api-openapi.yml, openapi/cloudflare-registrar-domains-api-openapi.yml,
openapi/cloudflare-registrar-registration-api-openapi.yml, openapi/cloudflare-registrar-transfer-api-openapi.yml,
openapi/cloudflare-registrations-api-openapi.yml, openapi/cloudflare-remediations-api-openapi.yml,
openapi/cloudflare-reports-other-api-openapi.yml, openapi/cloudflare-repository-connections-api-openapi.yml,
openapi/cloudflare-request-for-information-rfi-api-openapi.yml, openapi/cloudflare-requests-dashboard-api-openapi.yml,
openapi/cloudflare-resource-sharing-api-openapi.yml, openapi/cloudflare-resource-tagging-api-openapi.yml,
openapi/cloudflare-resources-api-openapi.yml, openapi/cloudflare-rfi-api-openapi.yml, openapi/cloudflare-rfi-messages-api-openapi.yml,
openapi/cloudflare-rollouts-api-openapi.yml, openapi/cloudflare-routes-api-openapi.yml, openapi/cloudflare-rules-api-openapi.yml,
openapi/cloudflare-saved-queries-api-openapi.yml, openapi/cloudflare-scans-api-openapi.yml,
openapi/cloudflare-schema-validation-api-openapi.yml, openapi/cloudflare-schema-validation-settings-api-openapi.yml,
openapi/cloudflare-scim-discovery-api-openapi.yml, openapi/cloudflare-scim-groups-api-openapi.yml,
openapi/cloudflare-scim-users-api-openapi.yml, openapi/cloudflare-scripts-api-openapi.yml,
openapi/cloudflare-secondary-dns-acl-api-openapi.yml, openapi/cloudflare-secondary-dns-peer-api-openapi.yml,
openapi/cloudflare-secondary-dns-primary-zone-api-openapi.yml, openapi/cloudflare-secondary-dns-secondary-zone-api-openapi.yml,
openapi/cloudflare-secondary-dns-tsig-api-openapi.yml, openapi/cloudflare-secrets-api-openapi.yml,
openapi/cloudflare-secrets-store-api-openapi.yml, openapi/cloudflare-security-center-audit-log-api-openapi.yml,
openapi/cloudflare-security-center-insights-api-openapi.yml, openapi/cloudflare-security-center-partners-api-openapi.yml,
openapi/cloudflare-security-center-scans-api-openapi.yml, openapi/cloudflare-security-txt-api-openapi.yml,
openapi/cloudflare-sessions-api-openapi.yml, openapi/cloudflare-settings-api-openapi.yml,
openapi/cloudflare-shared-api-openapi.yml, openapi/cloudflare-signing-keys-api-openapi.yml,
openapi/cloudflare-sinkhole-config-api-openapi.yml, openapi/cloudflare-slots-api-openapi.yml,
openapi/cloudflare-smart-shield-settings-api-openapi.yml, openapi/cloudflare-smart-tiered-cache-api-openapi.yml,
openapi/cloudflare-spectrum-analytics-api-openapi.yml, openapi/cloudflare-spectrum-applications-api-openapi.yml,
openapi/cloudflare-ssl-tls-mode-recommendation-api-openapi.yml, openapi/cloudflare-ssl-verification-api-openapi.yml,
openapi/cloudflare-sso-api-openapi.yml, openapi/cloudflare-stream-audio-tracks-api-openapi.yml,
openapi/cloudflare-stream-live-inputs-api-openapi.yml, openapi/cloudflare-stream-mp4-downloads-api-openapi.yml,
openapi/cloudflare-stream-signing-keys-api-openapi.yml, openapi/cloudflare-stream-subtitles-captions-api-openapi.yml,
openapi/cloudflare-stream-video-clipping-api-openapi.yml, openapi/cloudflare-stream-videos-api-openapi.yml,
openapi/cloudflare-stream-watermark-profile-api-openapi.yml, openapi/cloudflare-stream-webhook-api-openapi.yml,
openapi/cloudflare-table-maintenance-configuration-api-openapi.yml, openapi/cloudflare-table-management-api-openapi.yml,
openapi/cloudflare-tag-api-openapi.yml, openapi/cloudflare-tagcategory-api-openapi.yml, openapi/cloudflare-target-environments-api-openapi.yml,
openapi/cloudflare-target-industry-api-openapi.yml, openapi/cloudflare-tenant-level-custom-nameservers-api-openapi.yml,
openapi/cloudflare-tenants-api-openapi.yml, openapi/cloudflare-threat-signals-api-openapi.yml,
openapi/cloudflare-tiered-caching-api-openapi.yml, openapi/cloudflare-time-travel-api-openapi.yml,
openapi/cloudflare-token-validation-token-configuration-api-openapi.yml, openapi/cloudflare-token-validation-token-rules-api-openapi.yml,
openapi/cloudflare-total-tls-api-openapi.yml, openapi/cloudflare-triggers-api-openapi.yml,
openapi/cloudflare-tseng-abuse-complaint-processor-other-api-openapi.yml, openapi/cloudflare-tunnel-routing-api-openapi.yml,
openapi/cloudflare-tunnel-virtual-network-api-openapi.yml, openapi/cloudflare-turnstile-api-openapi.yml,
openapi/cloudflare-universal-ssl-settings-for-a-zone-api-openapi.yml, openapi/cloudflare-url-intelligence-api-openapi.yml,
openapi/cloudflare-url-normalization-api-openapi.yml, openapi/cloudflare-url-scanner-api-openapi.yml,
openapi/cloudflare-url-scanner-deprecated-api-openapi.yml, openapi/cloudflare-usage-analytics-api-openapi.yml,
openapi/cloudflare-usage-api-openapi.yml, openapi/cloudflare-user-agent-blocking-rules-api-openapi.yml,
openapi/cloudflare-user-analytics-deprecated-api-openapi.yml, openapi/cloudflare-user-api-openapi.yml,
openapi/cloudflare-user-api-tokens-api-openapi.yml, openapi/cloudflare-user-billing-history-api-openapi.yml,
openapi/cloudflare-user-billing-profile-api-openapi.yml, openapi/cloudflare-user-s-account-memberships-api-openapi.yml,
openapi/cloudflare-user-s-invites-api-openapi.yml, openapi/cloudflare-user-s-organizations-api-openapi.yml,
openapi/cloudflare-user-subscription-api-openapi.yml, openapi/cloudflare-values-api-openapi.yml,
openapi/cloudflare-variants-api-openapi.yml, openapi/cloudflare-vectorize-api-openapi.yml,
openapi/cloudflare-vectorize-beta-deprecated-api-openapi.yml, openapi/cloudflare-vectors-api-openapi.yml,
openapi/cloudflare-verification-api-openapi.yml, openapi/cloudflare-versions-api-openapi.yml,
openapi/cloudflare-videos-api-openapi.yml, openapi/cloudflare-vulnerability-discovery-api-openapi.yml,
openapi/cloudflare-waf-overrides-api-openapi.yml, openapi/cloudflare-waf-packages-api-openapi.yml,
openapi/cloudflare-waf-rule-groups-api-openapi.yml, openapi/cloudflare-waf-rules-api-openapi.yml,
openapi/cloudflare-waiting-room-api-openapi.yml, openapi/cloudflare-warp-change-events-api-openapi.yml,
openapi/cloudflare-warp-teams-device-api-other-api-openapi.yml, openapi/cloudflare-web-analytics-api-openapi.yml,
openapi/cloudflare-web3-hostname-api-openapi.yml, openapi/cloudflare-webhooks-api-openapi.yml,
openapi/cloudflare-whois-record-api-openapi.yml, openapi/cloudflare-widgets-api-openapi.yml,
openapi/cloudflare-worker-cron-trigger-api-openapi.yml, openapi/cloudflare-worker-deployments-api-openapi.yml,
openapi/cloudflare-worker-environment-api-openapi.yml, openapi/cloudflare-worker-routes-api-openapi.yml,
openapi/cloudflare-worker-script-api-openapi.yml, openapi/cloudflare-worker-subdomain-api-openapi.yml,
openapi/cloudflare-worker-tail-logs-api-openapi.yml, openapi/cloudflare-worker-versions-api-openapi.yml,
openapi/cloudflare-workers-account-settings-api-openapi.yml, openapi/cloudflare-workers-ai-api-openapi.yml,
openapi/cloudflare-workers-ai-finetune-api-openapi.yml, openapi/cloudflare-workers-api-openapi.yml,
openapi/cloudflare-workers-for-platforms-api-openapi.yml, openapi/cloudflare-workers-k2-other-api-openapi.yml,
openapi/cloudflare-workers-kv-namespace-api-openapi.yml, openapi/cloudflare-workers-pipelines-other-api-openapi.yml,
openapi/cloudflare-workers-smart-placement-api-openapi.yml, openapi/cloudflare-workflows-api-openapi.yml,
openapi/cloudflare-zaraz-api-openapi.yml, openapi/cloudflare-zero-trust-accounts-api-openapi.yml,
openapi/cloudflare-zero-trust-applications-review-status-api-openapi.yml, openapi/cloudflare-zero-trust-certificates-api-openapi.yml,
openapi/cloudflare-zero-trust-connectivity-settings-api-openapi.yml, openapi/cloudflare-zero-trust-gateway-application-and-application-type-mappings-api-openapi.yml,
openapi/cloudflare-zero-trust-gateway-categories-api-openapi.yml, openapi/cloudflare-zero-trust-gateway-dns-destination-ipv4-address-pairs-api-openapi.yml,
openapi/cloudflare-zero-trust-gateway-locations-api-openapi.yml, openapi/cloudflare-zero-trust-gateway-operations-api-openapi.yml,
openapi/cloudflare-zero-trust-gateway-pac-files-api-openapi.yml, openapi/cloudflare-zero-trust-gateway-proxy-endpoints-api-openapi.yml,
openapi/cloudflare-zero-trust-gateway-rules-api-openapi.yml, openapi/cloudflare-zero-trust-hostname-route-api-openapi.
# --- truncated at 32 KB (1732 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cloudflare/refs/heads/main/agentic-access/cloudflare-agentic-access.yml
Work with this as data
Every access contract here is available over the APIs.io API and to AI agents over MCP. Agentic Access is not yet its own endpoint on the v1 API. Reach it through catalog search and the tag graph, or the MCP server.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for agentic access
3 MCP tools reach this
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
curl "https://apis.io/api/v1/search?q=cloudflare-agentic-access&limit=10"
curl "https://apis.io/api/v1/tags/cloudflare-agentic-access"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.