Cloudflare Zones API

openapi: 3.0.3
info:
  title: Cloudflare / Accounts Zones API
  description: Needs description.
  license:
    name: BSD-3-Clause
    url: https://opensource.org/licenses/BSD-3-Clause
  version: 4.0.0
servers:
- url: https://api.cloudflare.com/client/v4
  description: Client API
security:
- api_email: []
  api_key: []
- api_token: []
- user_service_key: []
tags:
- name: Zones
paths:
  /zones/{identifier}/access/certificates/{uuid}:
    delete:
      tags:
      - Zones
      summary: Cloudflare Delete an mTLS certificate
      description: Deletes an mTLS certificate.
      operationId: zone-level-access-mtls-authentication-delete-an-mtls-certificate
      parameters:
      - name: uuid
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '200':
          description: Delete an mTLS certificate response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_components-schemas-id_response'
        4XX:
          description: Delete an mTLS certificate response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    get:
      tags:
      - Zones
      summary: Cloudflare Get an mTLS certificate
      description: Fetches a single mTLS certificate.
      operationId: zone-level-access-mtls-authentication-get-an-mtls-certificate
      parameters:
      - name: uuid
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '200':
          description: Get an mTLS certificate response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_certificates_components-schemas-single_response'
        4XX:
          description: Get an mTLS certificate response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    put:
      tags:
      - Zones
      summary: Cloudflare Update an mTLS certificate
      description: Updates a configured mTLS certificate.
      operationId: zone-level-access-mtls-authentication-update-an-mtls-certificate
      parameters:
      - name: uuid
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              required:
              - associated_hostnames
              properties:
                associated_hostnames:
                  $ref: '#/components/schemas/access_associated_hostnames'
                name:
                  $ref: '#/components/schemas/access_certificates_components-schemas-name'
      responses:
        '200':
          description: Update an mTLS certificate response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_certificates_components-schemas-single_response'
        4XX:
          description: Update an mTLS certificate response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
  /zones/{identifier}/access/certificates/settings:
    get:
      tags:
      - Zones
      summary: Cloudflare List all mTLS hostname settings
      description: List all mTLS hostname settings for this zone.
      operationId: zone-level-access-mtls-authentication-list-mtls-certificates-hostname-settings
      parameters:
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '200':
          description: List mTLS hostname settings response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_response_collection_hostnames'
        4XX:
          description: List mTLS hostname settings response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    put:
      tags:
      - Zones
      summary: Cloudflare Update an mTLS certificate's hostname settings
      description: Updates an mTLS certificate's hostname settings.
      operationId: zone-level-access-mtls-authentication-update-an-mtls-certificate-settings
      parameters:
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - settings
              properties:
                settings:
                  type: array
                  items:
                    $ref: '#/components/schemas/access_settings'
      responses:
        '202':
          description: Update an mTLS certificates hostname settings response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_response_collection_hostnames'
        4XX:
          description: Update an mTLS certificates hostname settings failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
  /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates/{certificate_id}:
    delete:
      tags:
      - Zones
      summary: Cloudflare Delete Hostname Client Certificate
      operationId: per-hostname-authenticated-origin-pull-delete-hostname-client-certificate
      parameters:
      - name: certificate_id
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/tls-certificates-and-hostnames_identifier'
      - name: zone_id
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/tls-certificates-and-hostnames_identifier'
      requestBody:
        required: true
        content:
          application/json: {}
      responses:
        '200':
          description: Delete Hostname Client Certificate response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/tls-certificates-and-hostnames_components-schemas-certificate_response_single'
        4XX:
          description: Delete Hostname Client Certificate response failure
          content:
            application/json:
              schema:
                allOf:
                - $ref: '#/components/schemas/tls-certificates-and-hostnames_components-schemas-certificate_response_single'
                - $ref: '#/components/schemas/tls-certificates-and-hostnames_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    get:
      tags:
      - Zones
      summary: Cloudflare Get the Hostname Client Certificate
      description: Get the certificate by ID to be used for client authentication on a hostname.
      operationId: per-hostname-authenticated-origin-pull-get-the-hostname-client-certificate
      parameters:
      - name: certificate_id
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/tls-certificates-and-hostnames_identifier'
      - name: zone_id
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/tls-certificates-and-hostnames_identifier'
      responses:
        '200':
          description: Get the Hostname Client Certificate response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/tls-certificates-and-hostnames_components-schemas-certificate_response_single'
        4XX:
          description: Get the Hostname Client Certificate response failure
          content:
            application/json:
              schema:
                allOf:
                - $ref: '#/components/schemas/tls-certificates-and-hostnames_components-schemas-certificate_response_single'
                - $ref: '#/components/schemas/tls-certificates-and-hostnames_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
  /zones:
    get:
      tags:
      - Zones
      summary: Cloudflare List Zones
      description: Lists, searches, sorts, and filters your zones.
      operationId: zones-get
      parameters:
      - name: name
        in: query
        schema:
          type: string
          description: "A domain name. Optional filter operators can be provided to extend refine the search:\n  * `equal` (default)\n  * `not_equal`\n  * `starts_with`\n  * `ends_with`\n  * `contains`\n  * `starts_with_case_sensitive`\n  * `ends_with_case_sensitive`\n  * `contains_case_sensitive`\n"
          maxLength: 253
        examples:
          Basic Query:
            summary: Simple Query
            value: example.com
          Contains Query:
            summary: Contains Query
            value: contains:.org
          Ends With Query:
            summary: Ends With Query
            value: ends_with:arpa
          Starts With Query:
            summary: Starts With Query
            value: starts_with:dev
      - name: status
        in: query
        schema:
          type: string
          description: A zone status
          enum:
          - initializing
          - pending
          - active
          - moved
      - name: account.id
        in: query
        schema:
          type: string
          description: An account ID
      - name: account.name
        in: query
        schema:
          type: string
          description: "An account Name. Optional filter operators can be provided to extend refine the search:\n  * `equal` (default)\n  * `not_equal`\n  * `starts_with`\n  * `ends_with`\n  * `contains`\n  * `starts_with_case_sensitive`\n  * `ends_with_case_sensitive`\n  * `contains_case_sensitive`\n"
          maxLength: 253
        examples:
          Basic Query:
            summary: Simple Query
            value: Dev Account
          Contains Query:
            summary: Contains Query
            value: contains:Test
      - name: page
        in: query
        schema:
          type: number
          description: Page number of paginated results.
          default: 1
          minimum: 1
      - name: per_page
        in: query
        schema:
          type: number
          description: Number of zones per page.
          default: 20
          minimum: 5
          maximum: 50
      - name: order
        in: query
        schema:
          type: string
          description: Field to order zones by.
          enum:
          - name
          - status
          - account.id
          - account.name
          example: status
      - name: direction
        in: query
        schema:
          type: string
          description: Direction to order zones.
          enum:
          - asc
          - desc
          example: desc
      - name: match
        in: query
        schema:
          type: string
          description: Whether to match all search requirements or at least one (any).
          enum:
          - any
          - all
          default: all
      responses:
        '200':
          description: List Zones response
          content:
            application/json:
              schema:
                allOf:
                - $ref: '#/components/schemas/zones_api-response-common'
                - properties:
                    result_info:
                      $ref: '#/components/schemas/zones_result_info'
                - properties:
                    result:
                      type: array
                      items:
                        $ref: '#/components/schemas/zones_zone'
        4XX:
          description: List Zones response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/zones_api-response-common-failure'
      security:
      - api_token: []
      - api_email: []
        api_key: []
    post:
      tags:
      - Zones
      summary: Cloudflare Create Zone
      operationId: zones-post
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - name
              - account
              properties:
                account:
                  type: object
                  properties:
                    id:
                      $ref: '#/components/schemas/zones_identifier'
                name:
                  $ref: '#/components/schemas/zones_name'
                type:
                  $ref: '#/components/schemas/zones_type'
      responses:
        '200':
          description: Create Zone response
          content:
            application/json:
              schema:
                allOf:
                - $ref: '#/components/schemas/zones_api-response-common'
                - type: object
                  properties:
                    result:
                      $ref: '#/components/schemas/zones_zone'
        4XX:
          description: Create Zone response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/zones_api-response-common-failure'
      security:
      - api_token: []
      - api_email: []
        api_key: []
  /zones/{identifier}/access/apps:
    get:
      tags:
      - Zones
      summary: Cloudflare List Access Applications
      description: List all Access Applications in a zone.
      operationId: zone-level-access-applications-list-access-applications
      parameters:
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '200':
          description: List Access Applications response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_apps_components-schemas-response_collection-2'
        4XX:
          description: List Access Applications response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    post:
      tags:
      - Zones
      summary: Cloudflare Add an Access application
      description: Adds a new application to Access.
      operationId: zone-level-access-applications-add-a-bookmark-application
      parameters:
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/access_schemas-apps'
      responses:
        '201':
          description: Add an Access application response
          content:
            application/json:
              schema:
                allOf:
                - $ref: '#/components/schemas/access_apps_components-schemas-single_response-2'
                - properties:
                    result:
                      $ref: '#/components/schemas/access_schemas-apps'
        4XX:
          description: Add an Access application response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
  /zones/{identifier}/access/apps/{app_id}:
    delete:
      tags:
      - Zones
      summary: Cloudflare Delete an Access application
      description: Deletes an application from Access.
      operationId: zone-level-access-applications-delete-an-access-application
      parameters:
      - name: app_id
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_app_id'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '202':
          description: Delete an Access application response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_id_response'
        4XX:
          description: Delete an Access application response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    get:
      tags:
      - Zones
      summary: Cloudflare Get an Access application
      description: Fetches information about an Access application.
      operationId: zone-level-access-applications-get-an-access-application
      parameters:
      - name: app_id
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_app_id'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '200':
          description: Get an Access application response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_apps_components-schemas-single_response-2'
        4XX:
          description: Get an Access application response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    put:
      tags:
      - Zones
      summary: Cloudflare Update an Access application
      description: Updates an Access application.
      operationId: zone-level-access-applications-update-a-bookmark-application
      parameters:
      - name: app_id
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_app_id'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/access_schemas-apps'
      responses:
        '200':
          description: Update an Access application response
          content:
            application/json:
              schema:
                allOf:
                - $ref: '#/components/schemas/access_apps_components-schemas-single_response-2'
                - properties:
                    result:
                      $ref: '#/components/schemas/access_schemas-apps'
        4XX:
          description: Update an Access application response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
  /zones/{identifier}/access/apps/{app_id}/revoke_tokens:
    post:
      tags:
      - Zones
      summary: Cloudflare Revoke application tokens
      description: Revokes all tokens issued for an application.
      operationId: zone-level-access-applications-revoke-service-tokens
      parameters:
      - name: app_id
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_app_id'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '202':
          description: Revoke application tokens response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_schemas-empty_response'
        4XX:
          description: Revoke application tokens response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
  /zones/{identifier}/access/apps/{app_id}/user_policy_checks:
    get:
      tags:
      - Zones
      summary: Cloudflare Test Access policies
      description: Tests if a specific user has permission to access an application.
      operationId: zone-level-access-applications-test-access-policies
      parameters:
      - name: app_id
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_app_id'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '200':
          description: Test Access policies response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_policy_check_response'
        4XX:
          description: Test Access policies response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
  /zones/{identifier}/access/apps/{uuid}/ca:
    delete:
      tags:
      - Zones
      summary: Cloudflare Delete a short-lived certificate CA
      description: Deletes a short-lived certificate CA.
      operationId: zone-level-access-short-lived-certificate-c-as-delete-a-short-lived-certificate-ca
      parameters:
      - name: uuid
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '202':
          description: Delete a short-lived certificate CA response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_schemas-id_response'
        4XX:
          description: Delete a short-lived certificate CA response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    get:
      tags:
      - Zones
      summary: Cloudflare Get a short-lived certificate CA
      description: Fetches a short-lived certificate CA and its public key.
      operationId: zone-level-access-short-lived-certificate-c-as-get-a-short-lived-certificate-ca
      parameters:
      - name: uuid
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '200':
          description: Get a short-lived certificate CA response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_ca_components-schemas-single_response'
        4XX:
          description: Get a short-lived certificate CA response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    post:
      tags:
      - Zones
      summary: Cloudflare Create a short-lived certificate CA
      description: Generates a new short-lived certificate CA and public key.
      operationId: zone-level-access-short-lived-certificate-c-as-create-a-short-lived-certificate-ca
      parameters:
      - name: uuid
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '200':
          description: Create a short-lived certificate CA response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_ca_components-schemas-single_response'
        4XX:
          description: Create a short-lived certificate CA response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
  /zones/{identifier}/access/apps/{uuid}/policies:
    get:
      tags:
      - Zones
      summary: Cloudflare List Access policies
      description: Lists Access policies configured for an application.
      operationId: zone-level-access-policies-list-access-policies
      parameters:
      - name: uuid
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '200':
          description: List Access policies response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_policies_components-schemas-response_collection-2'
        4XX:
          description: List Access policies response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    post:
      tags:
      - Zones
      summary: Cloudflare Create an Access policy
      description: Create a new Access policy for an application.
      operationId: zone-level-access-policies-create-an-access-policy
      parameters:
      - name: uuid
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              required:
              - name
              - decision
              - include
              properties:
                approval_groups:
                  $ref: '#/components/schemas/access_approval_groups'
                approval_required:
                  $ref: '#/components/schemas/access_approval_required'
                decision:
                  $ref: '#/components/schemas/access_decision'
                exclude:
                  $ref: '#/components/schemas/access_schemas-exclude'
                include:
                  $ref: '#/components/schemas/access_include'
                isolation_required:
                  $ref: '#/components/schemas/access_schemas-isolation_required'
                name:
                  $ref: '#/components/schemas/access_policies_components-schemas-name'
                precedence:
                  $ref: '#/components/schemas/access_precedence'
                purpose_justification_prompt:
                  $ref: '#/components/schemas/access_purpose_justification_prompt'
                purpose_justification_required:
                  $ref: '#/components/schemas/access_purpose_justification_required'
                require:
                  $ref: '#/components/schemas/access_schemas-require'
      responses:
        '201':
          description: Create an Access policy response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_policies_components-schemas-single_response-2'
        4XX:
          description: Create an Access policy response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
  /zones/{identifier}/access/apps/{uuid1}/policies/{uuid}:
    delete:
      tags:
      - Zones
      summary: Cloudflare Delete an Access policy
      description: Delete an Access policy.
      operationId: zone-level-access-policies-delete-an-access-policy
      parameters:
      - name: uuid
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: uuid1
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '202':
          description: Delete an Access policy response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_id_response'
        4XX:
          description: Delete an Access policy response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    get:
      tags:
      - Zones
      summary: Cloudflare Get an Access policy
      description: Fetches a single Access policy.
      operationId: zone-level-access-policies-get-an-access-policy
      parameters:
      - name: uuid
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: uuid1
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      responses:
        '200':
          description: Get an Access policy response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_policies_components-schemas-single_response-2'
        4XX:
          description: Get an Access policy response failure
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/access_api-response-common-failure'
      security:
      - api_email: []
        api_key: []
    put:
      tags:
      - Zones
      summary: Cloudflare Update an Access policy
      description: Update a configured Access policy.
      operationId: zone-level-access-policies-update-an-access-policy
      parameters:
      - name: uuid
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: uuid1
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_uuid'
      - name: identifier
        in: path
        required: true
        schema:
          $ref: '#/components/schemas/access_identifier'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              required:
              - name
              - decision
              - include
              properties:
                approval_groups:
                  $ref: '#/components/schemas/access_approval_groups'
                approval_required:
                  $ref: '#/components/schemas/access_approval_required'
                decision:
                  $ref: '#/components/schemas/access_decision'
                exclude:
                  $ref: '#/components/schemas/access_schema

# --- truncated at 32 KB (1373 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cloudflare/refs/heads/main/openapi/cloudflare-zones-api-openapi.yml