Cloudflare Zones API
The Zones API from Cloudflare — 265 operation(s) for zones.
Operations 508
Showing the first 250 of 508. The full set is in the contract, and via get_provider_operations.
Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay
Ask an LLM
“How do I see every domain I have added to Cloudflare?”
“Can I filter my zones by status, like only the ones still pending?”
Tell an agent
List all my zones.
Show my zones named {name}.
Ask an LLM
“How do I add a new domain to my account so it can be proxied?”
“Can I create a partial (CNAME setup) zone instead of a full one?”
Tell an agent
Add {name} as a new zone under account {account}.
Create a {type} zone for domain {name} in account {account}.
GET
/zones/{identifier}/access/apps
List Access applications in a zone · Cloudflare List Access Applications
#
Ask an LLM
“What Access applications are protecting this zone?”
“Can I see all the self-hosted apps Access guards on one domain?”
Tell an agent
List the Access applications on zone {identifier}.
Show every Access app configured for zone {identifier}.
POST
/zones/{identifier}/access/apps
Add an Access application to a zone · Cloudflare Add an Access application
#
Ask an LLM
“How do I put a new application behind Access on my zone?”
“Can I register a bookmark application in zone-level Access?”
Tell an agent
Add a new Access application to zone {identifier}.
Register a bookmark app with Access on zone {identifier}.
DELETE
/zones/{identifier}/access/apps/{app_id}
Delete an Access application · Cloudflare Delete an Access application
#
Ask an LLM
“How do I stop protecting an app with Access and remove it from my zone?”
“What happens when I delete an application from zone-level Access?”
Tell an agent destructive · confirm first
Delete Access application {app_id} from zone {identifier}.
Remove app {app_id} from Access on zone {identifier}.
GET
/zones/{identifier}/access/apps/{app_id}
Get one Access application's details · Cloudflare Get an Access application
#
Ask an LLM
“Where can I see the configuration of a single Access app on my zone?”
“What domain and session settings does this Access application use?”
Tell an agent
Show Access application {app_id} on zone {identifier}.
Fetch the settings of app {app_id} in zone {identifier}.
PUT
/zones/{identifier}/access/apps/{app_id}
Update an Access application · Cloudflare Update an Access application
#
Ask an LLM
“How do I change the configuration of an existing Access application?”
“Can I edit a bookmark app I already added to zone-level Access?”
Tell an agent
Update Access application {app_id} on zone {identifier}.
Change the settings of existing app {app_id} in zone {identifier}.
POST
/zones/{identifier}/access/apps/{app_id}/revoke_tokens
Revoke all tokens issued for an app · Cloudflare Revoke application tokens
#
Ask an LLM
“How do I force everyone to log in again to one Access application?”
“Can I invalidate every token that was issued for a single app?”
Tell an agent destructive · confirm first
Revoke all tokens issued for Access app {app_id} on zone {identifier}.
Log everyone out of application {app_id} in zone {identifier}.
GET
/zones/{identifier}/access/apps/{app_id}/user_policy_checks
Test whether users can reach an app · Cloudflare Test Access policies
#
Ask an LLM
“How can I check if a specific user would be allowed into an Access app?”
“Is there a way to test my Access policies before rolling them out?”
Tell an agent
Test the Access policies of app {app_id} on zone {identifier}.
Check which users pass the policy checks for app {app_id} in zone {identifier}.
DELETE
/zones/{identifier}/access/apps/{uuid}/ca
Delete an app's short-lived certificate CA · Cloudflare Delete a short-lived certificate CA
#
Ask an LLM
“How do I remove the short-lived certificate CA from an application?”
“What breaks if I delete the CA used for short-lived certificates?”
Tell an agent destructive · confirm first
Delete the short-lived certificate CA of app {uuid} on zone {identifier}.
Remove the ephemeral cert CA from Access app {uuid} in zone {identifier}.
GET
/zones/{identifier}/access/apps/{uuid}/ca
Get an app's short-lived certificate CA · Cloudflare Get a short-lived certificate CA
#
Ask an LLM
“Where do I find the public key of the short-lived certificate CA for an SSH app?”
“Does this Access application already have a short-lived certificate CA?”
Tell an agent
Get the short-lived certificate CA for app {uuid} on zone {identifier}.
Show the CA public key for Access app {uuid} in zone {identifier}.
POST
/zones/{identifier}/access/apps/{uuid}/ca
Create a short-lived certificate CA for an app · Cloudflare Create a short-lived certificate CA
#
Ask an LLM
“How do I generate a short-lived certificate CA so users get ephemeral certs?”
“Can I create a new CA and public key for one Access application?”
Tell an agent
Create a short-lived certificate CA for app {uuid} on zone {identifier}.
Generate a new CA and public key for Access app {uuid} in zone {identifier}.
GET
/zones/{identifier}/access/apps/{uuid}/policies
List Access policies for an application · Cloudflare List Access policies
#
Ask an LLM
“Which Access policies are attached to this application?”
“Can I see the allow and block rules configured for one app?”
Tell an agent
List the Access policies for app {uuid} on zone {identifier}.
Show every policy on Access application {uuid} in zone {identifier}.
POST
/zones/{identifier}/access/apps/{uuid}/policies
Create an Access policy for an application · Cloudflare Create an Access policy
#
Ask an LLM
“How do I add a rule that decides who can reach an Access app?”
“Can a new policy require approval or a purpose justification before access?”
Tell an agent
Create an Access policy named {name} with decision {decision} on app {uuid} in zone {identifier}.
Add policy {name} to app {uuid} on zone {identifier} including {include}.
DELETE
/zones/{identifier}/access/apps/{uuid1}/policies/{uuid}
Delete an Access policy · Cloudflare Delete an Access policy
#
Ask an LLM
“How do I remove a policy from an Access application?”
“Will deleting an Access policy change who can reach the app?”
Tell an agent destructive · confirm first
Delete Access policy {uuid} from app {uuid1} on zone {identifier}.
Remove policy {uuid} of application {uuid1} in zone {identifier}.
GET
/zones/{identifier}/access/apps/{uuid1}/policies/{uuid}
Get one Access policy · Cloudflare Get an Access policy
#
Ask an LLM
“How can I view the include, exclude and require rules of a single policy?”
“What decision does a particular Access policy make?”
Tell an agent
Show Access policy {uuid} of app {uuid1} on zone {identifier}.
Fetch policy {uuid} for application {uuid1} in zone {identifier}.
PUT
/zones/{identifier}/access/apps/{uuid1}/policies/{uuid}
Update an Access policy · Cloudflare Update an Access policy
#
Ask an LLM
“How do I change who an existing Access policy lets in?”
“Can I change the precedence of a policy I already created?”
Tell an agent
Update Access policy {uuid} on app {uuid1} in zone {identifier} to decision {decision}.
Rename policy {uuid} of app {uuid1} on zone {identifier} to {name} and include {include}.
GET
/zones/{identifier}/access/apps/ca
List short-lived certificate CAs in a zone · Cloudflare List short-lived certificate CAs
#
Ask an LLM
“Which of my Access apps in this zone have short-lived certificate CAs?”
“Can I get all the CA public keys at once for SSH short-lived certs?”
Tell an agent
List all short-lived certificate CAs on zone {identifier}.
Show every ephemeral cert CA and public key in zone {identifier}.
GET
/zones/{identifier}/access/certificates
List Access mTLS root certificates · Cloudflare List mTLS certificates
#
Ask an LLM
“What mTLS root certificates has Access got for my zone?”
“Can I see every client-auth root CA uploaded to zone-level Access?”
Tell an agent
List the Access mTLS certificates on zone {identifier}.
Show all mTLS root certs Access uses in zone {identifier}.
POST
/zones/{identifier}/access/certificates
Add an mTLS root certificate to Access · Cloudflare Add an mTLS certificate
#
Ask an LLM
“How do I upload a root CA so Access can authenticate devices with mTLS?”
“Can I link a new mTLS certificate to specific hostnames when adding it?”
Tell an agent
Add mTLS root certificate {name} with PEM {certificate} to Access on zone {identifier}.
Upload root cert {name} to zone {identifier} for hostnames {associated_hostnames} using {certificate}.
DELETE
/zones/{identifier}/access/certificates/{uuid}
Delete an Access mTLS certificate · Cloudflare Delete an mTLS certificate
#
Ask an LLM
“How do I remove an mTLS root certificate from Access?”
“What happens to devices using a root cert once I delete it from Access?”
Tell an agent destructive · confirm first
Delete Access mTLS certificate {uuid} from zone {identifier}.
Remove mTLS root cert {uuid} in zone {identifier}.
GET
/zones/{identifier}/access/certificates/{uuid}
Get one Access mTLS certificate · Cloudflare Get an mTLS certificate
#
Ask an LLM
“How can I look up a single mTLS root certificate in Access?”
“Which hostnames is this mTLS certificate associated with?”
Tell an agent
Show Access mTLS certificate {uuid} on zone {identifier}.
Fetch mTLS root cert {uuid} in zone {identifier}.
PUT
/zones/{identifier}/access/certificates/{uuid}
Update an Access mTLS certificate · Cloudflare Update an mTLS certificate
#
Ask an LLM
“How do I change which hostnames an Access mTLS certificate applies to?”
“Can I rename an mTLS root certificate I already uploaded?”
Tell an agent
Associate mTLS certificate {uuid} on zone {identifier} with hostnames {associated_hostnames}.
Rename mTLS cert {uuid} in zone {identifier} to {name} for hostnames {associated_hostnames}.
GET
/zones/{identifier}/access/certificates/settings
List mTLS hostname settings · Cloudflare List all mTLS hostname settings
#
Ask an LLM
“Which hostnames in my zone have mTLS client certificate forwarding turned on?”
“Can I see the per-hostname mTLS settings Access applies?”
Tell an agent
List the mTLS hostname settings for zone {identifier}.
Show how mTLS is configured per hostname in zone {identifier}.
PUT
/zones/{identifier}/access/certificates/settings
Update mTLS hostname settings · Cloudflare Update an mTLS certificate's hostname settings
#
Ask an LLM
“How do I change mTLS behavior for individual hostnames in a zone?”
“Can I turn on China network or client cert forwarding per hostname?”
Tell an agent
Replace the mTLS hostname settings on zone {identifier} with {settings}.
Update per-hostname mTLS settings in zone {identifier} to {settings}.
GET
/zones/{identifier}/access/groups
List Access groups in a zone · Cloudflare List Access groups
#
Ask an LLM
“What Access groups have been defined for my zone?”
“Can I see the reusable user groups that zone-level Access policies reference?”
Tell an agent
List the Access groups on zone {identifier}.
Show every Access group in zone {identifier}.
Ask an LLM
“How do I make a reusable group of users for Access policies?”
“Can a new Access group exclude some people while including others?”
Tell an agent
Create Access group {name} on zone {identifier} including {include}.
Make group {name} in zone {identifier} that includes {include} and excludes {exclude}.
DELETE
/zones/{identifier}/access/groups/{uuid}
Delete an Access group · Cloudflare Delete an Access group
#
Ask an LLM
“How do I get rid of an Access group I no longer use?”
“Does deleting an Access group affect the policies that reference it?”
Tell an agent destructive · confirm first
Delete Access group {uuid} from zone {identifier}.
Remove group {uuid} in zone {identifier}.
GET
/zones/{identifier}/access/groups/{uuid}
Get one Access group · Cloudflare Get an Access group
#
Ask an LLM
“How can I see who belongs to one Access group?”
“What include and require rules define a particular Access group?”
Tell an agent
Show Access group {uuid} on zone {identifier}.
Fetch the rules of group {uuid} in zone {identifier}.
PUT
/zones/{identifier}/access/groups/{uuid}
Update an Access group · Cloudflare Update an Access group
#
Ask an LLM
“How do I change the membership rules of an existing Access group?”
“Can I add a require rule to a group I already made?”
Tell an agent
Update Access group {uuid} on zone {identifier} to include {include}.
Rename group {uuid} in zone {identifier} to {name} with include rules {include}.
GET
/zones/{identifier}/access/identity_providers
List Access identity providers · Cloudflare List Access identity providers
#
Ask an LLM
“Which login methods are set up for Access on my zone?”
“Can I see every identity provider configured for zone-level Access?”
Tell an agent
List the identity providers for Access on zone {identifier}.
Show all login methods configured in zone {identifier}.
POST
/zones/{identifier}/access/identity_providers
Add an identity provider to Access · Cloudflare Add an Access identity provider
#
Ask an LLM
“How do I connect a new SSO login method to Access for a zone?”
“Can I add a one-time PIN or SAML login to zone-level Access?”
Tell an agent
Add a new identity provider to Access on zone {identifier}.
Connect an SSO login method to zone {identifier}.
DELETE
/zones/{identifier}/access/identity_providers/{uuid}
Delete an Access identity provider · Cloudflare Delete an Access identity provider
#
Ask an LLM
“How do I remove a login method from Access?”
“What happens to users who sign in with an identity provider I delete?”
Tell an agent destructive · confirm first
Delete identity provider {uuid} from zone {identifier}.
Remove login method {uuid} from Access in zone {identifier}.
GET
/zones/{identifier}/access/identity_providers/{uuid}
Get one Access identity provider · Cloudflare Get an Access identity provider
#
Ask an LLM
“How can I view the configuration of a single login method?”
“What settings does this identity provider use in Access?”
Tell an agent
Show identity provider {uuid} on zone {identifier}.
Fetch the config of login method {uuid} in zone {identifier}.
PUT
/zones/{identifier}/access/identity_providers/{uuid}
Update an Access identity provider · Cloudflare Update an Access identity provider
#
Ask an LLM
“How do I change the settings of a login method already in Access?”
“Can I rotate the client secret on an existing identity provider?”
Tell an agent
Update identity provider {uuid} on zone {identifier}.
Change the configuration of login method {uuid} in zone {identifier}.
GET
/zones/{identifier}/access/organizations
Get my Zero Trust organization config · Cloudflare Get your Zero Trust organization
#
Ask an LLM
“What is the auth domain of my Zero Trust organization?”
“Where can I see the login page design and seat expiry for my organization?”
Tell an agent
Show the Zero Trust organization settings for zone {identifier}.
Get my Zero Trust org config via zone {identifier}.
POST
/zones/{identifier}/access/organizations
Set up a Zero Trust organization · Cloudflare Create your Zero Trust organization
#
Ask an LLM
“How do I set up a Zero Trust organization for the first time?”
“What auth domain do I need to create my organization?”
Tell an agent
Create Zero Trust organization {name} with auth domain {auth_domain} on zone {identifier}.
Set up my organization on zone {identifier} named {name} at {auth_domain}.
PUT
/zones/{identifier}/access/organizations
Update my Zero Trust organization · Cloudflare Update your Zero Trust organization
#
Ask an LLM
“How do I change the login page design for my Zero Trust organization?”
“Can I make the dashboard read-only for my organization's Zero Trust settings?”
Tell an agent
Rename the Zero Trust organization on zone {identifier} to {name}.
Set the auth domain of my organization on zone {identifier} to {auth_domain}.
POST
/zones/{identifier}/access/organizations/revoke_user
Revoke all Access tokens for a user · Cloudflare Revoke all Access tokens for a user
#
Ask an LLM
“How do I cut off one person's access to every application at once?”
“Can I sign out a departing employee from all Access apps?”
Tell an agent destructive · confirm first
Revoke all Access tokens for {email} on zone {identifier}.
Kick user {email} out of every app in zone {identifier}.
GET
/zones/{identifier}/access/service_tokens
List Access service tokens · Cloudflare List service tokens
#
Ask an LLM
“Which service tokens exist for machine access to my zone?”
“Can I see all the non-human credentials Access has issued?”
Tell an agent
List the service tokens on zone {identifier}.
Show every Access service token in zone {identifier}.
POST
/zones/{identifier}/access/service_tokens
Create an Access service token · Cloudflare Create a service token
#
Ask an LLM
“How do I give a script or bot credentials to get past Access?”
“When can I see the client secret of a new service token?”
Tell an agent
Create service token {name} on zone {identifier}.
Generate a service token {name} valid for {duration} in zone {identifier}.
DELETE
/zones/{identifier}/access/service_tokens/{uuid}
Delete an Access service token · Cloudflare Delete a service token
#
Ask an LLM
“How do I revoke a service token a machine was using?”
“What happens to automated clients when I delete their service token?”
Tell an agent destructive · confirm first
Delete service token {uuid} from zone {identifier}.
Remove Access service token {uuid} in zone {identifier}.
PUT
/zones/{identifier}/access/service_tokens/{uuid}
Update an Access service token · Cloudflare Update a service token
#
Ask an LLM
“How do I rename or change the lifetime of an existing service token?”
“Can I extend how long a service token lasts?”
Tell an agent
Rename service token {uuid} on zone {identifier} to {name}.
Set the duration of service token {uuid} in zone {identifier} to {duration}.
Ask an LLM
“How many DNS queries did my zone answer over a time period?”
“Can I break DNS query totals down by dimensions like query type or response code?”
Tell an agent
Summarize DNS metrics {metrics} for zone {identifier} since {since}.
Report DNS {metrics} by {dimensions} for zone {identifier} between {since} and {until}.
GET
/zones/{identifier}/dns_analytics/report/bytime
Get DNS analytics over time · Cloudflare By Time
#
Ask an LLM
“How has DNS query volume on my zone changed hour by hour?”
“Can I chart DNS metrics in time buckets of my choosing?”
Tell an agent
Chart DNS {metrics} for zone {identifier} grouped every {time_delta}.
Show DNS query counts over time for zone {identifier} from {since} to {until}.
GET
/zones/{identifier}/subscription
Get a zone's subscription · Cloudflare Zone Subscription Details
#
Ask an LLM
“What plan and add-ons is my zone subscribed to?”
“When does the current billing period for this zone end?”
Tell an agent
Show the subscription details for zone {identifier}.
Tell me which plan zone {identifier} is on.
POST
/zones/{identifier}/subscription
Subscribe a zone to a plan · Cloudflare Create Zone Subscription
#
Ask an LLM
“How do I start a paid plan subscription on a zone that has none?”
“Can I create a subscription for an add-on on my zone?”
Tell an agent
Create a subscription for zone {identifier} on rate plan {rate_plan}.
Start a {frequency} subscription for zone {identifier} with plan {rate_plan}.
PUT
/zones/{identifier}/subscription
Change a zone's plan or add-ons · Cloudflare Update Zone Subscription
#
Ask an LLM
“How do I upgrade the plan on an existing zone subscription?”
“Can I switch a zone's billing frequency to yearly?”
Tell an agent
Change the subscription of zone {identifier} to rate plan {rate_plan}.
Switch zone {identifier} billing frequency to {frequency}.
Ask an LLM
“How do I remove a domain from my account entirely?”
“Is deleting a zone reversible?”
Tell an agent destructive · confirm first
Delete zone {zone_id}.
Remove domain zone {zone_id} from my account.
Ask an LLM
“How do I look up the status and nameservers of one zone?”
“What plan and account is a particular zone on?”
Tell an agent
Show details for zone {zone_id}.
Get the nameservers and status of zone {zone_id}.
Ask an LLM
“How do I pause Cloudflare on one domain?”
“Can I change a zone's type or set vanity nameservers?”
Tell an agent
Pause zone {zone_id}: set paused to {paused}.
Change zone {zone_id} type to {type}.
Ask an LLM
“Is Total TLS turned on for my zone?”
“Which certificate authority does Total TLS use for my hostnames?”
Tell an agent
Show the Total TLS settings for zone {zone_id}.
Check whether Total TLS is enabled on zone {zone_id}.
POST
/zones/{zone_id}/acm/total_tls
Turn Total TLS on or off · Cloudflare Enable or Disable Total TLS
#
Ask an LLM
“How do I automatically issue certificates for every proxied hostname?”
“Can I choose the certificate authority when enabling Total TLS?”
Tell an agent
Set Total TLS on zone {zone_id} to enabled {enabled}.
Enable Total TLS on zone {zone_id} using CA {certificate_authority} ({enabled}).
PUT
/zones/{zone_id}/activation_check
Rerun a pending zone's activation check · Cloudflare Rerun the Activation Check
#
Ask an LLM
“How do I make Cloudflare recheck my nameservers after I changed them?”
“How often can I trigger an activation check on a free zone?”
Tell an agent
Rerun the activation check for pending zone {zone_id}.
Recheck nameserver activation on zone {zone_id}.
GET
/zones/{zone_id}/analytics/latency
Get Argo latency analytics for a zone · Cloudflare Argo Analytics for a zone
#
Ask an LLM
“How much has Argo improved response latency on my zone?”
“Can I get Argo latency data as a histogram?”
Tell an agent
Show Argo latency analytics for zone {zone_id}.
Get Argo latency for zone {zone_id} in {bins} bins.
GET
/zones/{zone_id}/analytics/latency/colos
Get Argo analytics by data center · Cloudflare Argo Analytics for a zone at different PoPs
#
Ask an LLM
“Which Cloudflare data centers see the biggest Argo speedup for my zone?”
“Can I compare Argo performance across PoPs?”
Tell an agent
Show Argo analytics per PoP for zone {zone_id}.
Break down Argo latency by data center for zone {zone_id}.
GET
/zones/{zone_id}/api_gateway/configuration
Get API Shield configuration · Cloudflare Retrieve information about specific configuration properties
#
Ask an LLM
“What auth ID characteristics does API Shield use to identify sessions on my zone?”
“Can I read just some API Shield configuration properties?”
Tell an agent
Show the API Shield configuration for zone {zone_id}.
Get API Shield properties {properties} on zone {zone_id}.
PUT
/zones/{zone_id}/api_gateway/configuration
Set API Shield session identifiers · Cloudflare Set configuration properties
#
Ask an LLM
“How do I tell API Shield which header or cookie identifies an API session?”
“Can I change the auth ID characteristics for my zone?”
Tell an agent
Set API Shield auth ID characteristics on zone {zone_id} to {auth_id_characteristics}.
Configure session identifiers {auth_id_characteristics} for API Shield on zone {zone_id}.
GET
/zones/{zone_id}/api_gateway/discovery
Export discovered API operations as OpenAPI · Cloudflare Retrieve discovered operations on a zone rendered as OpenAPI schemas
#
Ask an LLM
“Can API Shield give me an OpenAPI file of the endpoints it discovered on my zone?”
“How do I download discovered API traffic as OpenAPI schemas?”
Tell an agent
Export the discovered operations on zone {zone_id} as OpenAPI.
Give me OpenAPI schemas for everything API Discovery found on zone {zone_id}.
GET
/zones/{zone_id}/api_gateway/discovery/operations
List API endpoints discovered on a zone · Cloudflare Retrieve discovered operations on a zone
#
Ask an LLM
“Which API endpoints has API Discovery found in my traffic?”
“Can I filter discovered endpoints to only those still awaiting review?”
Tell an agent
List the discovered API operations on zone {zone_id}.
Show discovered endpoints on zone {zone_id} for host {host} with state {state}.
PATCH
/zones/{zone_id}/api_gateway/discovery/operations
Bulk update the state of discovered endpoints · Cloudflare Patch discovered operations
#
Ask an LLM
“How do I mark many discovered endpoints as reviewed at once?”
“Can I ignore a batch of discovered API operations in one call?”
Tell an agent
Update the review state of several discovered operations on zone {zone_id}.
Bulk-mark discovered endpoints on zone {zone_id} as reviewed.
PATCH
/zones/{zone_id}/api_gateway/discovery/operations/{operation_id}
Update the state of one discovered endpoint · Cloudflare Patch discovered operation
#
Ask an LLM
“How do I mark a single discovered endpoint as ignored?”
“What review states can one discovered operation be set to?”
Tell an agent
Set discovered operation {operation_id} on zone {zone_id} to state {state}.
Mark only discovered endpoint {operation_id} in zone {zone_id} as {state}.
GET
/zones/{zone_id}/api_gateway/operations
List managed API operations on a zone · Cloudflare Retrieve information about all operations on a zone
#
Ask an LLM
“Which API endpoints have I saved to Endpoint Management?”
“Can I list saved operations along with features like thresholds or schema info?”
Tell an agent
List the saved API operations in Endpoint Management for zone {zone_id}.
Show saved operations on zone {zone_id} for host {host} with feature {feature}.
POST
/zones/{zone_id}/api_gateway/operations
Add API operations to Endpoint Management · Cloudflare Add operations to a zone
#
Ask an LLM
“How do I add my API endpoints to API Shield so they can be protected?”
“Can saved endpoints include path variables?”
Tell an agent
Add API operations to Endpoint Management on zone {zone_id}.
Save a batch of new endpoints to API Shield for zone {zone_id}.
DELETE
/zones/{zone_id}/api_gateway/operations/{operation_id}
Remove an operation from Endpoint Management · Cloudflare Delete an operation
#
Ask an LLM
“How do I stop tracking an endpoint in API Shield Endpoint Management?”
“What happens to protections on an endpoint when I delete its saved operation?”
Tell an agent destructive · confirm first
Delete saved API operation {operation_id} from zone {zone_id}.
Remove endpoint {operation_id} from Endpoint Management on zone {zone_id}.
GET
/zones/{zone_id}/api_gateway/operations/{operation_id}
Get one managed API operation · Cloudflare Retrieve information about an operation
#
Ask an LLM
“How can I see the details of a single endpoint saved in API Shield?”
“Can I include feature data like schema info when fetching one operation?”
Tell an agent
Show saved API operation {operation_id} on zone {zone_id}.
Get operation {operation_id} in zone {zone_id} with feature {feature}.
GET
/zones/{zone_id}/api_gateway/operations/{operation_id}/schema_validation
Get schema validation settings for an operation · Cloudflare Retrieve operation-level schema validation settings
#
Ask an LLM
“What mitigation action applies when a request to one endpoint fails schema validation?”
“Does a specific operation override the zone's schema validation action?”
Tell an agent
Show schema validation settings for operation {operation_id} on zone {zone_id}.
Get the validation mitigation action of endpoint {operation_id} in zone {zone_id}.
PUT
/zones/{zone_id}/api_gateway/operations/{operation_id}/schema_validation
Set schema validation action for an operation · Cloudflare Update operation-level schema validation settings
#
Ask an LLM
“How do I block invalid requests to only one endpoint?”
“Can I set a single operation's schema validation to log instead of block?”
Tell an agent
Set the schema validation action for operation {operation_id} on zone {zone_id} to {mitigation_action}.
Make endpoint {operation_id} in zone {zone_id} {mitigation_action} on invalid requests.
PATCH
/zones/{zone_id}/api_gateway/operations/schema_validation
Set schema validation for many operations · Cloudflare Update multiple operation-level schema validation settings
#
Ask an LLM
“How do I change schema validation actions for several endpoints in one request?”
“Can I bulk-update per-operation validation settings?”
Tell an agent
Update schema validation settings for multiple operations on zone {zone_id}.
Bulk-set per-endpoint validation actions on zone {zone_id}.
GET
/zones/{zone_id}/api_gateway/schemas
Export managed operations as OpenAPI · Cloudflare Retrieve operations and features as OpenAPI schemas
#
Ask an LLM
“Can I download my saved API Shield endpoints as an OpenAPI document?”
“Is there a way to export saved operations with their thresholds as OpenAPI?”
Tell an agent
Export the saved operations on zone {zone_id} as OpenAPI schemas.
Give me OpenAPI for saved endpoints on host {host} in zone {zone_id} with feature {feature}.
GET
/zones/{zone_id}/api_gateway/settings/schema_validation
Get zone-wide schema validation settings · Cloudflare Retrieve zone level schema validation settings
#
Ask an LLM
“What happens by default on my zone when an API request fails schema validation?”
“Is there a zone-wide override for schema validation actions?”
Tell an agent
Show the zone-level schema validation settings for zone {zone_id}.
Get the default validation mitigation action on zone {zone_id}.
PATCH
/zones/{zone_id}/api_gateway/settings/schema_validation
Partially update zone schema validation · Cloudflare Update zone level schema validation settings
#
Ask an LLM
“Can I change only the override action for schema validation without touching the default?”
“How do I temporarily disable schema validation mitigation across the whole zone?”
Tell an agent
Patch zone {zone_id} to override schema validation with {validation_override_mitigation_action}.
Change just the validation override on zone {zone_id} to {validation_override_mitigation_action}.
PUT
/zones/{zone_id}/api_gateway/settings/schema_validation
Replace zone-wide schema validation settings · Cloudflare Update zone level schema validation settings
#
Ask an LLM
“How do I set the default action for requests that fail schema validation on my zone?”
“Can I replace both the default and override validation actions at once?”
Tell an agent
Set the default schema validation action on zone {zone_id} to {validation_default_mitigation_action}.
Replace zone {zone_id} validation settings: default {validation_default_mitigation_action}, override {validation_override_mitigation_action}.
GET
/zones/{zone_id}/api_gateway/user_schemas
List uploaded API schemas · Cloudflare Retrieve information about all schemas on a zone
#
Ask an LLM
“What OpenAPI schemas have I uploaded to API Shield for my zone?”
“Can I list only the schemas that have validation enabled?”
Tell an agent
List the schemas uploaded to zone {zone_id}.
Show schemas on zone {zone_id} with validation enabled {validation_enabled}.
POST
/zones/{zone_id}/api_gateway/user_schemas
Upload an API schema for validation · Cloudflare Upload a schema to a zone
#
Ask an LLM
“How do I upload an OpenAPI file so API Shield can validate requests?”
“Can I upload a schema without turning validation on yet?”
Tell an agent
Upload schema file {file} of kind {kind} to zone {zone_id}.
Upload {file} as schema {name} on zone {zone_id} with kind {kind} and validation {validation_enabled}.
DELETE
/zones/{zone_id}/api_gateway/user_schemas/{schema_id}
Delete an uploaded API schema · Cloudflare Delete a schema
#
Ask an LLM
“How do I remove a schema I uploaded to API Shield?”
“Does deleting a schema stop validation for its endpoints?”
Tell an agent destructive · confirm first
Delete schema {schema_id} from zone {zone_id}.
Remove uploaded API schema {schema_id} on zone {zone_id}.
GET
/zones/{zone_id}/api_gateway/user_schemas/{schema_id}
Get one uploaded API schema · Cloudflare Retrieve information about a specific schema on a zone
#
Ask an LLM
“How can I view the details of one schema I uploaded to API Shield?”
“Can I fetch a schema's metadata without its full source?”
Tell an agent
Show uploaded schema {schema_id} on zone {zone_id}.
Get schema {schema_id} in zone {zone_id} without source ({omit_source}).
PATCH
/zones/{zone_id}/api_gateway/user_schemas/{schema_id}
Turn validation on or off for a schema · Cloudflare Enable validation for a schema
#
Ask an LLM
“How do I start enforcing an uploaded schema?”
“Can I pause validation for one schema without deleting it?”
Tell an agent
Enable validation for schema {schema_id} on zone {zone_id}: {validation_enabled}.
Set validation_enabled to {validation_enabled} for schema {schema_id} in zone {zone_id}.
GET
/zones/{zone_id}/api_gateway/user_schemas/{schema_id}/operations
List operations defined in an uploaded schema · Cloudflare Retrieve all operations from a schema
#
Ask an LLM
“Which endpoints does my uploaded schema describe?”
“Can I see which operations in a schema are not yet in Endpoint Management?”
Tell an agent
List the operations in schema {schema_id} on zone {zone_id}.
Show operations from schema {schema_id} in zone {zone_id} with status {operation_status}.
GET
/zones/{zone_id}/argo/smart_routing
Check if Argo Smart Routing is on · Cloudflare Get Argo Smart Routing setting
#
Ask an LLM
“Is Argo Smart Routing enabled for my zone?”
“How can I see my zone's Argo Smart Routing setting?”
Tell an agent
Show the Argo Smart Routing setting for zone {zone_id}.
Check whether smart routing is on for zone {zone_id}.
PATCH
/zones/{zone_id}/argo/smart_routing
Turn Argo Smart Routing on or off · Cloudflare Patch Argo Smart Routing setting
#
Ask an LLM
“How do I enable Argo Smart Routing to route traffic over faster paths?”
“Can I switch off Argo Smart Routing for a zone?”
Tell an agent
Set Argo Smart Routing on zone {zone_id} to {value}.
Turn smart routing {value} for zone {zone_id}.
GET
/zones/{zone_id}/argo/tiered_caching
Check if Tiered Caching is on · Cloudflare Get Tiered Caching setting
#
Ask an LLM
“Is Argo Tiered Caching enabled on my zone?”
“Where can I read the Tiered Caching setting?”
Tell an agent
Show the Tiered Caching setting for zone {zone_id}.
Check whether Argo Tiered Caching is enabled on zone {zone_id}.
PATCH
/zones/{zone_id}/argo/tiered_caching
Turn Tiered Caching on or off · Cloudflare Patch Tiered Caching setting
#
Ask an LLM
“How do I enable Tiered Caching to cut requests to my origin?”
“Can I disable Argo Tiered Caching for a zone?”
Tell an agent
Set Tiered Caching on zone {zone_id} to {value}.
Switch Argo Tiered Caching {value} for zone {zone_id}.
GET
/zones/{zone_id}/bot_management
Get bot management config · Cloudflare Get Zone Bot Management Config
#
Ask an LLM
“What bot protection settings are active on my zone?”
“Is Bot Fight Mode or Super Bot Fight Mode on for this domain?”
Tell an agent
Show the bot management configuration for zone {zone_id}.
Get the bot protection settings of zone {zone_id}.
PUT
/zones/{zone_id}/bot_management
Update bot management config · Cloudflare Update Zone Bot Management Config
#
Ask an LLM
“How do I turn on Bot Fight Mode for my zone?”
“Can I change Super Bot Fight Mode or enterprise bot settings through the API?”
Tell an agent
Update the bot management configuration for zone {zone_id}.
Enable Bot Fight Mode on zone {zone_id}.
GET
/zones/{zone_id}/cache/cache_reserve
Check Cache Reserve setting · Cloudflare Get Cache Reserve setting
#
Ask an LLM
“Is Cache Reserve storing my cacheable files in persistent storage?”
“What is the Cache Reserve setting for my zone?”
Tell an agent
Show the Cache Reserve setting for zone {zone_id}.
Check if Cache Reserve is on for zone {zone_id}.
PATCH
/zones/{zone_id}/cache/cache_reserve
Turn Cache Reserve on or off · Cloudflare Change Cache Reserve setting
#
Ask an LLM
“How do I extend cache lifetimes by enabling Cache Reserve?”
“Do I need a Cache Reserve subscription before turning it on?”
Tell an agent
Set Cache Reserve on zone {zone_id} to {value}.
Turn Cache Reserve {value} for zone {zone_id}.
GET
/zones/{zone_id}/cache/cache_reserve_clear
Check Cache Reserve Clear status · Cloudflare Get Cache Reserve Clear
#
Ask an LLM
“Has my Cache Reserve Clear finished yet?”
“How do I see the progress of clearing Cache Reserve?”
Tell an agent
Show the Cache Reserve Clear status for zone {zone_id}.
Check whether clearing Cache Reserve is done on zone {zone_id}.
POST
/zones/{zone_id}/cache/cache_reserve_clear
Start clearing Cache Reserve · Cloudflare Start Cache Reserve Clear
#
Ask an LLM
“How do I wipe everything stored in Cache Reserve?”
“Must Cache Reserve be disabled before I clear it?”
Tell an agent destructive · confirm first
Start a Cache Reserve Clear on zone {zone_id}.
Empty the Cache Reserve for zone {zone_id}.
GET
/zones/{zone_id}/cache/origin_post_quantum_encryption
Get origin post-quantum encryption setting · Cloudflare Get Origin Post-Quantum Encryption setting
#
Ask an LLM
“Does Cloudflare use post-quantum key agreement when connecting to my origin?”
“Is origin PQ encryption set to preferred or supported for this zone?”
Tell an agent
Show the origin post-quantum encryption setting for zone {zone_id}.
Check PQ key agreement to origin on zone {zone_id}.
PUT
/zones/{zone_id}/cache/origin_post_quantum_encryption
Set origin post-quantum encryption · Cloudflare Change Origin Post-Quantum Encryption setting
#
Ask an LLM
“How do I make Cloudflare prefer post-quantum encryption to my origin server?”
“Can I turn off post-quantum key agreement toward my origin?”
Tell an agent
Set origin post-quantum encryption on zone {zone_id} to {value}.
Change PQ encryption to origin for zone {zone_id} to {value}.
GET
/zones/{zone_id}/cache/regional_tiered_cache
Get Regional Tiered Cache setting · Cloudflare Get Regional Tiered Cache setting
#
Ask an LLM
“Is Regional Tiered Cache checking a regional hub before my upper tier?”
“What is the Regional Tiered Cache setting on my zone?”
Tell an agent
Show the Regional Tiered Cache setting for zone {zone_id}.
Check if regional hub caching is on for zone {zone_id}.
PATCH
/zones/{zone_id}/cache/regional_tiered_cache
Turn Regional Tiered Cache on or off · Cloudflare Change Regional Tiered Cache setting
#
Ask an LLM
“How do I add a regional hub layer to my tiered cache topology?”
“Can I disable Regional Tiered Cache on a zone?”
Tell an agent
Set Regional Tiered Cache on zone {zone_id} to {value}.
Turn regional hub caching {value} for zone {zone_id}.
DELETE
/zones/{zone_id}/cache/tiered_cache_smart_topology_enable
Remove Smart Tiered Cache setting · Cloudflare Delete Smart Tiered Cache setting
#
Ask an LLM
“How do I remove the Smart Tiered Cache setting from my zone entirely?”
“What happens when I delete Smart Tiered Cache enablement?”
Tell an agent destructive · confirm first
Delete the Smart Tiered Cache setting on zone {zone_id}.
Remove smart topology tiered caching from zone {zone_id}.
GET
/zones/{zone_id}/cache/tiered_cache_smart_topology_enable
Get Smart Tiered Cache setting · Cloudflare Get Smart Tiered Cache setting
#
Ask an LLM
“Is Smart Tiered Cache topology enabled for my zone?”
“Where can I read the Smart Tiered Cache setting?”
Tell an agent
Show the Smart Tiered Cache setting for zone {zone_id}.
Check smart topology for tiered cache on zone {zone_id}.
PATCH
/zones/{zone_id}/cache/tiered_cache_smart_topology_enable
Turn Smart Tiered Cache on or off · Cloudflare Patch Smart Tiered Cache setting
#
Ask an LLM
“How do I enable Smart Tiered Cache topology?”
“Can I switch Smart Tiered Cache off without deleting the setting?”
Tell an agent
Set Smart Tiered Cache on zone {zone_id} to {value}.
Turn smart tiered cache topology {value} for zone {zone_id}.
DELETE
/zones/{zone_id}/cache/variants
Delete image variants cache setting · Cloudflare Delete variants setting
#
Ask an LLM
“How do I stop caching image variants on my zone?”
“What happens when I remove the variants setting?”
Tell an agent destructive · confirm first
Delete the cache variants setting on zone {zone_id}.
Remove image variant caching from zone {zone_id}.
GET
/zones/{zone_id}/cache/variants
Get image variants cache setting · Cloudflare Get variants setting
#
Ask an LLM
“Which image file extensions have cached variants on my zone?”
“How can I see my zone's variants setting for serving WebP or AVIF?”
Tell an agent
Show the cache variants setting for zone {zone_id}.
Get which image variants are cached on zone {zone_id}.
PATCH
/zones/{zone_id}/cache/variants
Change image variants cache setting · Cloudflare Change variants setting
#
Ask an LLM
“How do I cache WebP variants of JPG images alongside the originals?”
“Can I choose which file extensions get cached variants?”
Tell an agent
Set the cache variants on zone {zone_id} to {value}.
Configure image variant caching for zone {zone_id} as {value}.
GET
/zones/{zone_id}/certificate_authorities/hostname_associations
List mTLS hostname associations · Cloudflare List Hostname Associations
#
Ask an LLM
“Which hostnames require API Shield client certificates on my zone?”
“Can I see hostnames associated with a specific mTLS certificate?”
Tell an agent
List the client certificate hostname associations on zone {zone_id}.
Show hostnames tied to mTLS certificate {mtls_certificate_id} on zone {zone_id}.
PUT
/zones/{zone_id}/certificate_authorities/hostname_associations
Replace mTLS hostname associations · Cloudflare Replace Hostname Associations
#
Ask an LLM
“How do I choose which hostnames enforce client certificate mTLS?”
“Can I link hostnames to my own uploaded mTLS CA certificate?”
Tell an agent
Replace the mTLS hostname associations on zone {zone_id} with {hostnames}.
Enforce client certs from CA {mtls_certificate_id} on hostnames {hostnames} in API Shield for zone {zone_id}.
GET
/zones/{zone_id}/client_certificates
List API Shield client certificates · Cloudflare List Client Certificates
#
Ask an LLM
“What mTLS client certificates have been issued for my zone?”
“Can I list only the client certificates that are revoked or pending?”
Tell an agent
List the API Shield client certificates on zone {zone_id}.
Show client certificates on zone {zone_id} with status {status}.
POST
/zones/{zone_id}/client_certificates
Issue an API Shield client certificate · Cloudflare Create Client Certificate
#
Ask an LLM
“How do I issue a client certificate for mTLS from a CSR?”
“How long can a new client certificate stay valid?”
Tell an agent
Issue a client certificate on zone {zone_id} from CSR {csr} valid for {validity_days} days.
Create an mTLS client cert for zone {zone_id} using {csr} for {validity_days} days.
DELETE
/zones/{zone_id}/client_certificates/{client_certificate_id}
Revoke a client certificate · Cloudflare Revoke Client Certificate
#
Ask an LLM
“How do I revoke a compromised mTLS client certificate?”
“What state does a client certificate go into when I revoke it?”
Tell an agent destructive · confirm first
Revoke client certificate {client_certificate_id} on zone {zone_id}.
Put mTLS client cert {client_certificate_id} in zone {zone_id} into pending revocation.
GET
/zones/{zone_id}/client_certificates/{client_certificate_id}
Get one client certificate · Cloudflare Client Certificate Details
#
Ask an LLM
“How can I see the status and expiry of a single client certificate?”
“What details does API Shield keep for one mTLS client cert?”
Tell an agent
Show client certificate {client_certificate_id} on zone {zone_id}.
Get details of mTLS client cert {client_certificate_id} in zone {zone_id}.
PATCH
/zones/{zone_id}/client_certificates/{client_certificate_id}
Reactivate a client certificate · Cloudflare Reactivate Client Certificate
#
Ask an LLM
“Can I undo a client certificate revocation that is still pending?”
“How do I reactivate an mTLS client cert before it is fully revoked?”
Tell an agent
Reactivate client certificate {client_certificate_id} on zone {zone_id}.
Cancel the pending revocation of client cert {client_certificate_id} in zone {zone_id}.
GET
/zones/{zone_id}/custom_certificates
List custom SSL certificates · Cloudflare List SSL Configurations
#
Ask an LLM
“Which custom SSL certificates have I uploaded to my zone?”
“Can I filter uploaded certificates by status?”
Tell an agent
List the custom SSL certificates on zone {zone_id}.
Show custom certificates on zone {zone_id} with status {status}.
POST
/zones/{zone_id}/custom_certificates
Upload a custom SSL certificate · Cloudflare Create SSL Configuration
#
Ask an LLM
“How do I upload my own SSL certificate and private key to a zone?”
“Can I restrict where my custom certificate's key is used geographically?”
Tell an agent
Upload certificate {certificate} with key {private_key} to zone {zone_id}.
Add custom SSL cert {certificate} and key {private_key} to zone {zone_id} as type {type}.
DELETE
/zones/{zone_id}/custom_certificates/{custom_certificate_id}
Delete a custom SSL certificate · Cloudflare Delete SSL Configuration
#
Ask an LLM
“How do I remove an uploaded SSL certificate from my zone?”
“What will serve TLS for my hostnames after I delete a custom certificate?”
Tell an agent destructive · confirm first
Delete custom certificate {custom_certificate_id} from zone {zone_id}.
Remove uploaded SSL cert {custom_certificate_id} on zone {zone_id}.
GET
/zones/{zone_id}/custom_certificates/{custom_certificate_id}
Get a custom SSL certificate · Cloudflare SSL Configuration Details
#
Ask an LLM
“How can I see the hosts and expiry date of one uploaded certificate?”
“What bundle method does a particular custom certificate use?”
Tell an agent
Show custom certificate {custom_certificate_id} on zone {zone_id}.
Get the details of uploaded cert {custom_certificate_id} in zone {zone_id}.
PATCH
/zones/{zone_id}/custom_certificates/{custom_certificate_id}
Replace a custom certificate's key or PEM · Cloudflare Edit SSL Configuration
#
Ask an LLM
“How do I renew an uploaded certificate with a new PEM and private key?”
“Does editing an SNI custom certificate change its ID?”
Tell an agent
Replace the PEM of custom certificate {custom_certificate_id} on zone {zone_id} with {certificate}.
Upload new key {private_key} and cert {certificate} for {custom_certificate_id} in zone {zone_id}.
PUT
/zones/{zone_id}/custom_certificates/prioritize
Reorder custom SSL certificate priority · Cloudflare Re-prioritize SSL Certificates
#
Ask an LLM
“How do I decide which of several custom certificates is served first?”
“Can I change the priority order of overlapping legacy certificates?”
Tell an agent
Reprioritize the custom certificates on zone {zone_id} as {certificates}.
Set the certificate order for zone {zone_id} to {certificates}.
GET
/zones/{zone_id}/custom_hostnames
List custom hostnames for SaaS customers · Cloudflare List Custom Hostnames
#
Ask an LLM
“Which of my customers' vanity domains are set up as custom hostnames?”
“Can I search custom hostnames by name or filter by SSL status?”
Tell an agent
List the custom hostnames on zone {zone_id}.
Find custom hostname {hostname} on zone {zone_id}.
POST
/zones/{zone_id}/custom_hostnames
Add a custom hostname with SSL · Cloudflare Create Custom Hostname
#
Ask an LLM
“How do I onboard a customer's own domain onto my SaaS zone?”
“Which validation methods can I use for a new custom hostname's certificate?”
Tell an agent
Add custom hostname {hostname} to zone {zone_id} with SSL {ssl}.
Onboard {hostname} on zone {zone_id} using SSL settings {ssl} and metadata {custom_metadata}.
DELETE
/zones/{zone_id}/custom_hostnames/{custom_hostname_id}
Delete a custom hostname and its certificates · Cloudflare Delete Custom Hostname (and any issued SSL certificates)
#
Ask an LLM
“How do I offboard a customer's vanity domain from my zone?”
“Are issued SSL certificates removed too when I delete a custom hostname?”
Tell an agent destructive · confirm first
Delete custom hostname {custom_hostname_id} from zone {zone_id}.
Remove {custom_hostname_id} and its SSL certificates from zone {zone_id}.
GET
/zones/{zone_id}/custom_hostnames/{custom_hostname_id}
Get one custom hostname · Cloudflare Custom Hostname Details
#
Ask an LLM
“How can I check whether a customer's custom hostname has finished validation?”
“What SSL status does a particular custom hostname have?”
Tell an agent
Show custom hostname {custom_hostname_id} on zone {zone_id}.
Get the validation status of custom hostname {custom_hostname_id} in zone {zone_id}.
PATCH
/zones/{zone_id}/custom_hostnames/{custom_hostname_id}
Edit a custom hostname's SSL or origin · Cloudflare Edit Custom Hostname
#
Ask an LLM
“How do I point one custom hostname at a different origin server?”
“Can I retrigger domain control validation for a custom hostname?”
Tell an agent
Send custom hostname {custom_hostname_id} on zone {zone_id} to origin {custom_origin_server}.
Update SSL settings of custom hostname {custom_hostname_id} in zone {zone_id} to {ssl}.
DELETE
/zones/{zone_id}/custom_hostnames/fallback_origin
Remove the custom hostname fallback origin · Cloudflare Delete Fallback Origin for Custom Hostnames
#
Ask an LLM
“How do I clear the fallback origin for custom hostnames?”
“What happens to custom hostnames without an origin once I delete the fallback?”
Tell an agent destructive · confirm first
Delete the fallback origin for custom hostnames on zone {zone_id}.
Remove the SaaS default origin from zone {zone_id}.
GET
/zones/{zone_id}/custom_hostnames/fallback_origin
Get the custom hostname fallback origin · Cloudflare Get Fallback Origin for Custom Hostnames
#
Ask an LLM
“Where does traffic for my custom hostnames go when no custom origin is set?”
“What is the status of my fallback origin?”
Tell an agent
Show the fallback origin for custom hostnames on zone {zone_id}.
Get the default origin for SaaS hostnames in zone {zone_id}.
PUT
/zones/{zone_id}/custom_hostnames/fallback_origin
Set the custom hostname fallback origin · Cloudflare Update Fallback Origin for Custom Hostnames
#
Ask an LLM
“How do I choose the default origin my customers' custom hostnames route to?”
“Can I change the fallback origin to a different hostname?”
Tell an agent
Set the fallback origin for custom hostnames on zone {zone_id} to {origin}.
Route SaaS custom hostnames in zone {zone_id} to fallback {origin}.
GET
/zones/{zone_id}/custom_ns
Get a zone's account custom nameserver usage · Cloudflare Get Account Custom Nameserver Related Zone Metadata
#
Ask an LLM
“Is this zone using my account's custom nameservers?”
“Which custom nameserver set is assigned to a zone?”
Tell an agent
Show account custom nameserver metadata for zone {zone_id}.
Check which custom NS set zone {zone_id} uses.
PUT
/zones/{zone_id}/custom_ns
Set a zone to use account custom nameservers · Cloudflare Set Account Custom Nameserver Related Zone Metadata
#
Ask an LLM
“How do I switch one zone onto my account-level custom nameservers?”
“Can I choose which nameserver set a zone uses?”
Tell an agent
Enable account custom nameservers on zone {zone_id}: {enabled}.
Assign custom nameserver set {ns_set} to zone {zone_id}.
GET
/zones/{zone_id}/dcv_delegation/uuid
Get the DCV Delegation identifier · Cloudflare Retrieve the DCV Delegation unique identifier
#
Ask an LLM
“What CNAME target do I need to delegate domain control validation to Cloudflare?”
“Where do I find the unique ID used for DCV Delegation?”
Tell an agent
Get the DCV Delegation UUID for zone {zone_id}.
Show the DCV delegation CNAME identifier on zone {zone_id}.
Ask an LLM
“How do I see all the DNS records for my domain?”
“Can I find only the proxied A records, or records with a certain tag or comment?”
Tell an agent
List the DNS records in zone {zone_id}.
Show {type} records named {name} in zone {zone_id}.
Ask an LLM
“How do I add a new A or CNAME record to my zone?”
“Why can't I create an A record on a name that already has a CNAME?”
Tell an agent
Create a new DNS record in zone {zone_id}.
Add a DNS record to zone {zone_id}.
DELETE
/zones/{zone_id}/dns_records/{dns_record_id}
Delete a DNS record · Cloudflare Delete DNS Record
#
Ask an LLM
“How do I remove a DNS record from my zone?”
“Can a deleted DNS record be recovered?”
Tell an agent destructive · confirm first
Delete DNS record {dns_record_id} from zone {zone_id}.
Remove record {dns_record_id} on zone {zone_id}.
GET
/zones/{zone_id}/dns_records/{dns_record_id}
Get one DNS record · Cloudflare DNS Record Details
#
Ask an LLM
“How can I look up the content and TTL of a single DNS record?”
“Is a specific DNS record proxied?”
Tell an agent
Show DNS record {dns_record_id} in zone {zone_id}.
Get the details of record {dns_record_id} on zone {zone_id}.
PATCH
/zones/{zone_id}/dns_records/{dns_record_id}
Partially update a DNS record · Cloudflare Update DNS Record
#
Ask an LLM
“Can I change just the IP address of a DNS record without resending everything?”
“How do I toggle proxying on one existing record?”
Tell an agent
Patch DNS record {dns_record_id} in zone {zone_id}.
Change only some fields of record {dns_record_id} on zone {zone_id}.
PUT
/zones/{zone_id}/dns_records/{dns_record_id}
Overwrite a DNS record · Cloudflare Overwrite DNS Record
#
Ask an LLM
“How do I replace every field of an existing DNS record in one go?”
“Does overwriting a record reset fields I leave out?”
Tell an agent
Overwrite DNS record {dns_record_id} in zone {zone_id}.
Fully replace record {dns_record_id} on zone {zone_id} with new values.
GET
/zones/{zone_id}/dns_records/export
Export DNS records as a BIND file · Cloudflare Export DNS Records
#
Ask an LLM
“How do I back up my zone's DNS records as a zone file?”
“Can I download my records in BIND format?”
Tell an agent
Export the DNS records of zone {zone_id} as BIND.
Download a zone file for zone {zone_id}.
POST
/zones/{zone_id}/dns_records/import
Import DNS records from a BIND file · Cloudflare Import DNS Records
#
Ask an LLM
“How do I bulk load DNS records from a zone file?”
“Can imported records be set to proxied automatically?”
Tell an agent
Import BIND file {file} into zone {zone_id}.
Upload zone file {file} to zone {zone_id} with proxied {proxied}.
POST
/zones/{zone_id}/dns_records/scan
Scan for and add common DNS records · Cloudflare Scan DNS Records
#
Ask an LLM
“Can Cloudflare discover my existing DNS records before I switch nameservers?”
“How do I auto-populate common records for a new domain?”
Tell an agent
Scan for common DNS records on zone {zone_id} and add them.
Auto-detect existing records for zone {zone_id}.
Ask an LLM
“How do I remove DNSSEC from my zone completely?”
“What should I do at my registrar before deleting DNSSEC?”
Tell an agent destructive · confirm first
Delete DNSSEC on zone {zone_id}.
Remove DNSSEC records from zone {zone_id}.
Ask an LLM
“Is DNSSEC active on my domain, and what DS record do I give my registrar?”
“Where can I see my zone's DNSSEC configuration?”
Tell an agent
Show DNSSEC details for zone {zone_id}.
Get the DS record and DNSSEC status of zone {zone_id}.
Ask an LLM
“How do I enable DNSSEC for my domain?”
“Can I use multi-signer or presigned DNSSEC?”
Tell an agent
Set DNSSEC status on zone {zone_id} to {status}.
Enable multi-signer DNSSEC on zone {zone_id}: {dnssec_multi_signer}.
GET
/zones/{zone_id}/firewall/access_rules/rules
List IP Access rules for a zone · Cloudflare List IP Access rules
#
Ask an LLM
“Which IPs, ranges or countries am I blocking or allowing on this zone?”
“Can I filter IP Access rules by mode?”
Tell an agent
List the IP Access rules on zone {zone_id}.
Show IP Access rules on zone {zone_id} matching {filters}.
POST
/zones/{zone_id}/firewall/access_rules/rules
Block or allow an IP on a zone · Cloudflare Create an IP Access rule
#
Ask an LLM
“How do I block an IP address or country on one domain?”
“Can I challenge instead of block traffic from an IP range?”
Tell an agent
Create an IP Access rule on zone {zone_id} to {mode} {configuration} with note {notes}.
Block {configuration} on zone {zone_id} using mode {mode}, noting {notes}.
DELETE
/zones/{zone_id}/firewall/access_rules/rules/{identifier}
Delete an IP Access rule · Cloudflare Delete an IP Access rule
#
Ask an LLM
“How do I unblock an IP by removing its access rule?”
“Can deleting a rule also remove similar rules in my other zones?”
Tell an agent destructive · confirm first
Delete IP Access rule {identifier} from zone {zone_id}.
Remove rule {identifier} on zone {zone_id} and cascade {cascade}.
PATCH
/zones/{zone_id}/firewall/access_rules/rules/{identifier}
Change an IP Access rule's action or note · Cloudflare Update an IP Access rule
#
Ask an LLM
“Can I switch an existing IP rule from block to challenge?”
“Which fields of an IP Access rule can I update?”
Tell an agent
Change IP Access rule {identifier} on zone {zone_id} to mode {mode}.
Update the notes on rule {identifier} in zone {zone_id} to {notes}.
GET
/zones/{zone_id}/firewall/waf/packages/{package_id}/groups
List WAF rule groups in a package · Cloudflare List WAF rule groups
#
Ask an LLM
“Which rule groups are in a legacy WAF managed rules package?”
“Can I list only the WAF rule groups that are turned on?”
Tell an agent
List WAF rule groups in package {package_id} on zone {zone_id}.
Show rule groups in package {package_id} of zone {zone_id} with mode {mode}.
GET
/zones/{zone_id}/firewall/waf/packages/{package_id}/groups/{group_id}
Get a WAF rule group · Cloudflare Get a WAF rule group
#
Ask an LLM
“How can I see whether one legacy WAF rule group is on or off?”
“How many rules are in a particular WAF rule group?”
Tell an agent
Show WAF rule group {group_id} in package {package_id} on zone {zone_id}.
Get details of rule group {group_id}, package {package_id}, zone {zone_id}.
PATCH
/zones/{zone_id}/firewall/waf/packages/{package_id}/groups/{group_id}
Turn a WAF rule group on or off · Cloudflare Update a WAF rule group
#
Ask an LLM
“How do I disable a whole group of legacy WAF managed rules?”
“Can I switch a WAF rule group back on?”
Tell an agent
Set WAF rule group {group_id} in package {package_id} on zone {zone_id} to {mode}.
Turn rule group {group_id} of package {package_id}, zone {zone_id}, {mode}.
GET
/zones/{zone_id}/firewall/waf/packages/{package_id}/rules
List WAF rules in a package · Cloudflare List WAF rules
#
Ask an LLM
“Which individual rules are in a legacy WAF package?”
“Can I list WAF rules belonging to a single rule group?”
Tell an agent
List WAF rules in package {package_id} on zone {zone_id}.
Show WAF rules in group {group_id} of package {package_id} on zone {zone_id}.
GET
/zones/{zone_id}/firewall/waf/packages/{package_id}/rules/{rule_id}
Get a single WAF rule · Cloudflare Get a WAF rule
#
Ask an LLM
“How do I see the action and description of one legacy WAF rule?”
“What mode is a specific managed WAF rule set to?”
Tell an agent
Look up the single managed WAF rule {rule_id} (package {package_id}, zone {zone_id}).
Fetch the description and action of WAF rule {rule_id} in package {package_id} on zone {zone_id}.
PATCH
/zones/{zone_id}/firewall/waf/packages/{package_id}/rules/{rule_id}
Change a single WAF rule's action · Cloudflare Update a WAF rule
#
Ask an LLM
“How do I disable one noisy legacy WAF rule causing false positives?”
“Can I change anything other than the mode on a WAF rule?”
Tell an agent
Switch individual WAF rule {rule_id} of package {package_id} on zone {zone_id} to action {mode}.
Change the action of rule {rule_id}, package {package_id}, zone {zone_id}, to {mode}.
Ask an LLM
“How do I lift a zone hold so my hostname can be added elsewhere?”
“Can I release a zone hold only temporarily?”
Tell an agent destructive · confirm first
Remove the zone hold on zone {zone_id}.
Release the hold on zone {zone_id} until {hold_after}.
Ask an LLM
“Is my zone under a hold that stops others from adding this hostname?”
“Does the zone hold also cover subdomains?”
Tell an agent
Show the zone hold status for zone {zone_id}.
Check whether zone {zone_id} is held.
Ask an LLM
“How do I prevent anyone else from adding my domain as a zone?”
“Can a zone hold block subdomains too?”
Tell an agent
Place a zone hold on zone {zone_id}.
Hold zone {zone_id} including subdomains {include_subdomains}.
GET
/zones/{zone_id}/hostnames/settings/{setting_id}
List a TLS setting across hostnames · Cloudflare List TLS setting for hostnames
#
Ask an LLM
“Which hostnames in my zone have a custom minimum TLS version?”
“Can I see per-hostname values for a TLS setting like ciphers or HTTP/2?”
Tell an agent
List hostname values for TLS setting {setting_id} on zone {zone_id}.
Show every hostname's {setting_id} setting in zone {zone_id}.
DELETE
/zones/{zone_id}/hostnames/settings/{setting_id}/{hostname}
Remove a hostname's TLS setting override · Cloudflare Delete TLS setting for hostname
#
Ask an LLM
“How do I drop a per-hostname TLS override so the zone default applies?”
“What value does a hostname use after I delete its TLS setting?”
Tell an agent destructive · confirm first
Delete TLS setting {setting_id} for {hostname} on zone {zone_id}.
Clear {hostname}'s {setting_id} override in zone {zone_id}.
PUT
/zones/{zone_id}/hostnames/settings/{setting_id}/{hostname}
Set a TLS setting for one hostname · Cloudflare Edit TLS setting for hostname
#
Ask an LLM
“How do I require TLS 1.2 or higher on just one hostname?”
“Can I set a different cipher list for a single hostname?”
Tell an agent
Set TLS setting {setting_id} for {hostname} on zone {zone_id} to {value}.
Change {hostname}'s {setting_id} in zone {zone_id} to {value}.
GET
/zones/{zone_id}/keyless_certificates
List Keyless SSL configurations · Cloudflare List Keyless SSL Configurations
#
Ask an LLM
“Which Keyless SSL servers are set up for my zone?”
“Can I see every configuration that keeps my private keys on my own servers?”
Tell an agent
List the Keyless SSL configurations on zone {zone_id}.
Show all keyless certificates in zone {zone_id}.
POST
/zones/{zone_id}/keyless_certificates
Create a Keyless SSL configuration · Cloudflare Create Keyless SSL Configuration
#
Ask an LLM
“How do I use TLS without handing my private key to Cloudflare?”
“Can a keyless server be reached through a Cloudflare Tunnel?”
Tell an agent
Create Keyless SSL for zone {zone_id} with cert {certificate} on key server {host}:{port}.
Set up keyless certificate {name} on zone {zone_id} using {certificate}, host {host}, port {port}.
DELETE
/zones/{zone_id}/keyless_certificates/{keyless_certificate_id}
Delete a Keyless SSL configuration · Cloudflare Delete Keyless SSL Configuration
#
Ask an LLM
“How do I remove a Keyless SSL configuration from my zone?”
“What happens to TLS on my hostnames when I delete a keyless cert?”
Tell an agent destructive · confirm first
Delete Keyless SSL configuration {keyless_certificate_id} from zone {zone_id}.
Remove keyless certificate {keyless_certificate_id} on zone {zone_id}.
GET
/zones/{zone_id}/keyless_certificates/{keyless_certificate_id}
Get a Keyless SSL configuration · Cloudflare Get Keyless SSL Configuration
#
Ask an LLM
“How can I see the key server host and port for one Keyless SSL setup?”
“Is a particular Keyless SSL configuration active?”
Tell an agent
Show Keyless SSL configuration {keyless_certificate_id} on zone {zone_id}.
Get keyless certificate {keyless_certificate_id} in zone {zone_id}.
PATCH
/zones/{zone_id}/keyless_certificates/{keyless_certificate_id}
Edit a Keyless SSL configuration · Cloudflare Edit Keyless SSL Configuration
#
Ask an LLM
“How do I move my Keyless SSL key server to a new host or port?”
“Can I disable a Keyless SSL configuration without deleting it?”
Tell an agent
Point Keyless SSL {keyless_certificate_id} on zone {zone_id} to {host}:{port}.
Set keyless cert {keyless_certificate_id} in zone {zone_id} enabled to {enabled}.
GET
/zones/{zone_id}/load_balancers
List load balancers on a zone · Cloudflare List Load Balancers
#
Ask an LLM
“What load balancers are configured for my zone?”
“Can I see all my zone's load balancers and their pools?”
Tell an agent
List the load balancers on zone {zone_id}.
Show every load balancer in zone {zone_id}.
Ask an LLM
“How do I spread traffic for a hostname across several origin pools?”
“Can a new load balancer steer traffic by region or country?”
Tell an agent
Create load balancer {name} on zone {zone_id} with pools {default_pools} and fallback {fallback_pool}.
Add a load balancer {name} to zone {zone_id} using steering policy {steering_policy}, pools {default_pools}, fallback {fallback_pool}.
DELETE
/zones/{zone_id}/load_balancers/{load_balancer_id}
Delete a load balancer · Cloudflare Delete Load Balancer
#
Ask an LLM
“How do I remove a load balancer from my zone?”
“What happens to traffic when I delete a load balancer?”
Tell an agent destructive · confirm first
Delete load balancer {load_balancer_id} from zone {zone_id}.
Remove load balancer {load_balancer_id} on zone {zone_id}.
GET
/zones/{zone_id}/load_balancers/{load_balancer_id}
Get one load balancer · Cloudflare Load Balancer Details
#
Ask an LLM
“How can I view the pools and steering policy of one load balancer?”
“Is session affinity turned on for this load balancer?”
Tell an agent
Show load balancer {load_balancer_id} on zone {zone_id}.
Get the config of load balancer {load_balancer_id} in zone {zone_id}.
PATCH
/zones/{zone_id}/load_balancers/{load_balancer_id}
Change some load balancer settings · Cloudflare Patch Load Balancer
#
Ask an LLM
“Can I disable a load balancer without resending its whole configuration?”
“How do I change just the steering policy of a load balancer?”
Tell an agent
Patch load balancer {load_balancer_id} on zone {zone_id} to enabled {enabled}.
Change only the steering policy of {load_balancer_id} in zone {zone_id} to {steering_policy}.
PUT
/zones/{zone_id}/load_balancers/{load_balancer_id}
Replace a load balancer's configuration · Cloudflare Update Load Balancer
#
Ask an LLM
“How do I fully replace an existing load balancer's configuration?”
“Must I resend the name and pools when doing a full load balancer update?”
Tell an agent
Replace load balancer {load_balancer_id} on zone {zone_id}: name {name}, pools {default_pools}, fallback {fallback_pool}.
Overwrite load balancer {load_balancer_id} in zone {zone_id} with fallback pool {fallback_pool} and default pools {default_pools}.
GET
/zones/{zone_id}/logpush/datasets/{dataset_id}/fields
List the log fields in a Logpush dataset · Cloudflare List fields
#
Ask an LLM
“Which fields can I include when pushing HTTP request logs?”
“What does each field in a Logpush dataset mean?”
Tell an agent
List the fields available in dataset {dataset_id} for zone {zone_id}.
Show the Logpush field names and descriptions of {dataset_id} on zone {zone_id}.
GET
/zones/{zone_id}/logpush/datasets/{dataset_id}/jobs
List Logpush jobs for one dataset · Cloudflare List Logpush jobs for a dataset
#
Ask an LLM
“Which Logpush jobs are shipping a particular dataset for my zone?”
“Can I see only the jobs pushing firewall events?”
Tell an agent
List Logpush jobs for dataset {dataset_id} on zone {zone_id}.
Show jobs exporting {dataset_id} in zone {zone_id}.
Ask an LLM
“What Instant Logs sessions are running on my zone?”
“Can I see my zone's live-tail log jobs?”
Tell an agent
List the Instant Logs jobs on zone {zone_id}.
Show live log streaming jobs in zone {zone_id}.
Ask an LLM
“How do I stream live request logs from my zone?”
“Can I sample or filter an Instant Logs stream?”
Tell an agent
Start an Instant Logs job on zone {zone_id} with fields {fields}.
Create a live log stream for zone {zone_id} filtered by {filter} at sample rate {sample}.
Ask an LLM
“Where are my zone's logs being pushed right now?”
“Can I see every Logpush job regardless of dataset?”
Tell an agent
List all Logpush jobs on zone {zone_id}.
Show every log push destination for zone {zone_id}.
Ask an LLM
“How do I send my zone's HTTP request logs to a storage bucket?”
“Do I need an ownership challenge to push logs to a new destination?”
Tell an agent
Create a Logpush job on zone {zone_id} sending to {destination_conf}.
Push dataset {dataset} from zone {zone_id} to {destination_conf} as job {name}.
DELETE
/zones/{zone_id}/logpush/jobs/{job_id}
Delete a zone Logpush job · Cloudflare Delete Logpush job
#
Ask an LLM
“Can I stop and remove a Logpush job that ships my zone's logs somewhere?”
“What happens to log delivery when I delete a zone Logpush job?”
Tell an agent destructive · confirm first
Delete Logpush job {job} on zone {zone}.
Remove the log push job {job} from my zone {zone} so it stops sending logs.
GET
/zones/{zone_id}/logpush/jobs/{job_id}
Get one Logpush job · Cloudflare Get Logpush job details
#
Ask an LLM
“How can I check the destination and status of a single Logpush job?”
“When did a particular Logpush job last succeed or fail?”
Tell an agent
Show Logpush job {job_id} on zone {zone_id}.
Get details of log push job {job_id} in zone {zone_id}.
Ask an LLM
“How do I change where an existing Logpush job sends logs?”
“Can I pause a Logpush job without deleting it?”
Tell an agent
Change the destination of Logpush job {job_id} on zone {zone_id} to {destination_conf}.
Set Logpush job {job_id} in zone {zone_id} enabled to {enabled}.
POST
/zones/{zone_id}/logpush/ownership
Request a Logpush destination ownership challenge · Cloudflare Get ownership challenge
#
Ask an LLM
“How do I prove I own the storage bucket I want to push zone logs to?”
“Where does Cloudflare send the ownership challenge token for a Logpush destination?”
Tell an agent
Send a new ownership challenge to Logpush destination {destination} for zone {zone}.
Request an ownership challenge file for my log destination {destination}.
POST
/zones/{zone_id}/logpush/ownership/validate
Validate a Logpush ownership challenge · Cloudflare Validate ownership challenge
#
Ask an LLM
“Is the ownership challenge token I received for my log destination valid?”
“Can I confirm the challenge I found in my bucket before creating a Logpush job?”
Tell an agent
Validate ownership challenge {challenge} for destination {destination} on zone {zone}.
Check that the challenge token {challenge} proves I own {destination}.
POST
/zones/{zone_id}/logpush/validate/destination/exists
Check if a Logpush job already uses a destination · Cloudflare Check destination exists
#
Ask an LLM
“Is there already a zone Logpush job writing to this destination?”
“Can I find out whether a log destination is taken before I create another job for it?”
Tell an agent
Check whether any Logpush job on zone {zone} already sends to {destination}.
Tell me if destination {destination} is already in use by a log push job.
POST
/zones/{zone_id}/logpush/validate/origin
Validate Logpush field and filter options · Cloudflare Validate origin
#
Ask an LLM
“Are my logpull_options (fields, timestamps, sampling) valid for a zone Logpush job?”
“What does Cloudflare say about the log options string I plan to use before I save the job?”
Tell an agent
Validate the log options {options} for a Logpush job on zone {zone}.
Check that the logpull options string {options} is accepted.
GET
/zones/{zone_id}/managed_headers
List Managed Transforms and their status · Cloudflare List Managed Transforms
#
Ask an LLM
“Which Managed Transforms are available for my zone and which are switched on?”
“Is the add-visitor-location-headers transform currently enabled?”
Tell an agent
List all Managed Transforms on zone {zone} with their enabled state.
Show me which managed request and response header transforms are active.
PATCH
/zones/{zone_id}/managed_headers
Turn Managed Transforms on or off · Cloudflare Update status of Managed Transforms
#
Ask an LLM
“Can I enable the managed transform that removes the X-Powered-By response header?”
“How do I switch several managed request header transforms on at once?”
Tell an agent
On zone {zone}, set managed request headers to {request_headers} and managed response headers to {response_headers}.
Enable the managed transforms {request_headers} for incoming requests on zone {zone}.
GET
/zones/{zone_id}/origin_tls_client_auth
List zone-level origin pull client certificates · Cloudflare List Certificates
#
Ask an LLM
“Which client certificates have I uploaded for zone-wide authenticated origin pulls?”
“What zone-level certificates does the edge present to my origin server?”
Tell an agent
List the zone-level authenticated origin pull certificates on zone {zone}.
Show every zone-wide client certificate used for edge-to-origin authentication.
POST
/zones/{zone_id}/origin_tls_client_auth
Upload a zone-level origin pull certificate · Cloudflare Upload Certificate
#
Ask an LLM
“Can I use my own certificate instead of the shared one for edge-to-origin communication?”
“How do I upload a custom client certificate and key for authenticated origin pulls across the whole zone?”
Tell an agent
Upload certificate {certificate} with private key {private_key} for zone-level authenticated origin pulls on zone {zone}.
Replace the shared origin pull certificate on zone {zone} with my own cert {certificate} and key {private_key}.
DELETE
/zones/{zone_id}/origin_tls_client_auth/{certificate_id}
Delete a zone-level origin pull certificate · Cloudflare Delete Certificate
#
Ask an LLM
“Can I remove a zone-wide authenticated origin pull certificate I no longer use?”
“What do I call to delete an old zone-level client certificate for origin pulls?”
Tell an agent destructive · confirm first
Delete zone-level origin pull certificate {certificate} from zone {zone}.
Remove the zone-wide client certificate {certificate} used for authenticated origin pulls.
GET
/zones/{zone_id}/origin_tls_client_auth/{certificate_id}
Get a zone-level origin pull certificate · Cloudflare Get Certificate Details
#
Ask an LLM
“When does my zone-level authenticated origin pull certificate expire?”
“What is the status of one zone-wide origin pull certificate I uploaded?”
Tell an agent
Get details of zone-level origin pull certificate {certificate} on zone {zone}.
Show the issuer and expiry for zone-wide client certificate {certificate}.
PUT
/zones/{zone_id}/origin_tls_client_auth/hostnames
Enable or disable per-hostname origin pull auth · Cloudflare Enable or Disable a Hostname for Client Authentication
#
Ask an LLM
“How do I attach a client certificate to a specific hostname for authenticated origin pulls?”
“Can I disable client certificate authentication for one hostname without affecting the rest of the zone?”
Tell an agent
Apply hostname-to-certificate associations {config} on zone {zone}.
Enable, disable or invalidate per-hostname origin pull settings using {config}.
GET
/zones/{zone_id}/origin_tls_client_auth/hostnames/{hostname}
Get a hostname's origin pull auth status · Cloudflare Get the Hostname Status for Client Authentication
#
Ask an LLM
“Is authenticated origin pull enabled for this particular hostname?”
“Which client certificate is associated with a hostname for origin authentication?”
Tell an agent
Get the client authentication status for hostname {hostname} on zone {zone}.
Check whether {hostname} presents a client certificate to my origin.
GET
/zones/{zone_id}/origin_tls_client_auth/hostnames/certificates
List per-hostname origin pull certificates · Cloudflare List Certificates
#
Ask an LLM
“What hostname client certificates have I uploaded for per-hostname origin pulls?”
“How many of my 10 per-zone hostname certificates are already used?”
Tell an agent
List the hostname client certificates on zone {zone}.
Show all per-hostname authenticated origin pull certificates I have uploaded.
POST
/zones/{zone_id}/origin_tls_client_auth/hostnames/certificates
Upload a hostname client certificate · Cloudflare Upload a Hostname Client Certificate
#
Ask an LLM
“How do I upload a certificate for client authentication on a single hostname?”
“Is there a limit on how many hostname client certificates a zone can hold?”
Tell an agent
Upload hostname client certificate {certificate} with key {private_key} to zone {zone}.
Add a per-hostname origin pull certificate {certificate} and its private key {private_key}.
DELETE
/zones/{zone_id}/origin_tls_client_auth/hostnames/certificates/{certificate_id}
Delete a hostname client certificate · Cloudflare Delete Hostname Client Certificate
#
Ask an LLM
“Can I delete a per-hostname client certificate to free up one of my slots?”
“What removes a hostname-level authenticated origin pull certificate?”
Tell an agent destructive · confirm first
Delete hostname client certificate {certificate} from zone {zone}.
Remove per-hostname origin pull certificate {certificate}.
GET
/zones/{zone_id}/origin_tls_client_auth/hostnames/certificates/{certificate_id}
Get a hostname client certificate · Cloudflare Get the Hostname Client Certificate
#
Ask an LLM
“What are the details of a hostname client certificate I uploaded for origin pulls?”
“Has my per-hostname client certificate finished deploying?”
Tell an agent
Get hostname client certificate {certificate} on zone {zone}.
Show status and expiry of per-hostname certificate {certificate}.
GET
/zones/{zone_id}/origin_tls_client_auth/settings
Check if zone-level origin pulls are enabled · Cloudflare Get Enablement Setting for Zone
#
Ask an LLM
“Is zone-level authenticated origin pull turned on for my site?”
“Does authenticated origin pull default to off for a zone?”
Tell an agent
Check whether zone-level authenticated origin pulls are enabled on zone {zone}.
Tell me if my zone currently authenticates edge-to-origin pulls.
PUT
/zones/{zone_id}/origin_tls_client_auth/settings
Turn zone-level origin pulls on or off · Cloudflare Set Enablement for Zone
#
Ask an LLM
“How do I switch on authenticated origin pulls for my whole zone?”
“Should the origin be configured before or after I enable zone-level origin pulls?”
Tell an agent
Set zone-level authenticated origin pulls to {enabled} on zone {zone}.
Disable authenticated origin pulls across zone {zone}.
Ask an LLM
“Is Page Shield enabled on my zone?”
“Does Page Shield use the reporting endpoint or the connection URL path right now?”
Tell an agent
Get the Page Shield settings for zone {zone}.
Show whether Page Shield script monitoring is on.
PUT
/zones/{zone_id}/page_shield
Update Page Shield settings · Cloudflare Update Page Shield settings
#
Ask an LLM
“How do I turn on Page Shield for my site?”
“Can I make Page Shield report to the Cloudflare reporting endpoint instead of my own?”
Tell an agent
Set Page Shield enabled to {enabled} on zone {zone}.
Update Page Shield on zone {zone} to use the Cloudflare reporting endpoint: {use_reporting}.
GET
/zones/{zone_id}/page_shield/connections
List connections detected by Page Shield · Cloudflare List Page Shield connections
#
Ask an LLM
“What third-party hosts are my pages making connections to?”
“Can I see only malicious connections first, or filter them by page URL?”
Tell an agent
List Page Shield connections on zone {zone} for hosts {hosts}.
Show outbound connections detected on page {page_url}, malicious ones first.
GET
/zones/{zone_id}/page_shield/connections/{connection_id}
Get a connection detected by Page Shield · Cloudflare Get a Page Shield connection
#
Ask an LLM
“When was a specific outbound connection first and last seen by Page Shield?”
“Is one detected connection flagged as malicious?”
Tell an agent
Get Page Shield connection {connection} on zone {zone}.
Show details for detected connection {connection}.
GET
/zones/{zone_id}/page_shield/policies
List Page Shield policies · Cloudflare List Page Shield policies
#
Ask an LLM
“Which Content Security Policy rules has Page Shield got configured for my zone?”
“What Page Shield policies exist and are they enabled?”
Tell an agent
List all Page Shield policies on zone {zone}.
Show my Page Shield CSP policies.
POST
/zones/{zone_id}/page_shield/policies
Create a Page Shield policy · Cloudflare Create a Page Shield policy
#
Ask an LLM
“How do I create a Page Shield policy that only allows scripts from my own domain?”
“Can I write a new Page Shield policy in log mode before enforcing it?”
Tell an agent
Create a Page Shield policy on zone {zone} with action {action} and value {value}.
Add a new Page Shield policy described as {description} that applies when {expression}.
DELETE
/zones/{zone_id}/page_shield/policies/{policy_id}
Delete a Page Shield policy · Cloudflare Delete a Page Shield policy
#
Ask an LLM
“Can I permanently remove a Page Shield policy?”
“What deletes a CSP policy from Page Shield?”
Tell an agent destructive · confirm first
Delete Page Shield policy {policy} from zone {zone}.
Remove the Page Shield policy {policy}.
GET
/zones/{zone_id}/page_shield/policies/{policy_id}
Get a Page Shield policy · Cloudflare Get a Page Shield policy
#
Ask an LLM
“What does a particular Page Shield policy allow and where does it apply?”
“Is an existing Page Shield policy set to allow or log?”
Tell an agent
Get Page Shield policy {policy} on zone {zone}.
Show the expression and CSP value of Page Shield policy {policy}.
PUT
/zones/{zone_id}/page_shield/policies/{policy_id}
Update a Page Shield policy · Cloudflare Update a Page Shield policy
#
Ask an LLM
“Can I change an existing Page Shield policy from log to allow?”
“How do I edit the expression on a Page Shield policy I already created?”
Tell an agent
Update Page Shield policy {policy} on zone {zone} to action {action}.
Disable existing Page Shield policy {policy} by setting enabled to {enabled}.
GET
/zones/{zone_id}/page_shield/scripts
List scripts detected by Page Shield · Cloudflare List Page Shield scripts
#
Ask an LLM
“Which JavaScript files are loading on my site's pages?”
“Can I list detected scripts without duplicates and with malicious ones on top?”
Tell an agent
List scripts Page Shield detected on zone {zone} for page {page_url}.
Show detected scripts loaded from hosts {hosts}, excluding duplicates.
GET
/zones/{zone_id}/page_shield/scripts/{script_id}
Get a script detected by Page Shield · Cloudflare Get a Page Shield script
#
Ask an LLM
“Is a particular JavaScript file on my site considered malicious by Page Shield?”
“What versions and hashes has Page Shield recorded for one script?”
Tell an agent
Get Page Shield script {script} on zone {zone}.
Show the details and malicious score of detected script {script}.
Ask an LLM
“What Page Rules do I have on my site and in what priority?”
“Can I list only the active Page Rules?”
Tell an agent
List Page Rules on zone {zone} with status {status}.
Show all my Page Rules ordered by {order}.
Ask an LLM
“How do I add a Page Rule that forwards one URL pattern to another?”
“Can I create a Page Rule that caches everything under a path?”
Tell an agent
Create a Page Rule on zone {zone} matching {targets} with actions {actions}.
Add a new Page Rule for {targets} at priority {priority} doing {actions}.
DELETE
/zones/{zone_id}/pagerules/{pagerule_id}
Delete a Page Rule · Cloudflare Delete a Page Rule
#
Ask an LLM
“How can I get rid of a Page Rule I no longer need?”
“What removes a Page Rule from my zone permanently?”
Tell an agent destructive · confirm first
Delete Page Rule {rule} from zone {zone}.
Remove Page Rule {rule}.
Ask an LLM
“What URL pattern and actions does a given Page Rule have?”
“Is a specific Page Rule active or disabled?”
Tell an agent
Get Page Rule {rule} on zone {zone}.
Show the targets and actions of Page Rule {rule}.
PATCH
/zones/{zone_id}/pagerules/{pagerule_id}
Edit selected fields of a Page Rule · Cloudflare Edit a Page Rule
#
Ask an LLM
“Can I change just the status or priority of a Page Rule without resending everything?”
“How do I pause one Page Rule temporarily?”
Tell an agent
Set Page Rule {rule} on zone {zone} to status {status}.
Change only the priority of Page Rule {rule} to {priority}.
PUT
/zones/{zone_id}/pagerules/{pagerule_id}
Replace a Page Rule's full configuration · Cloudflare Update a Page Rule
#
Ask an LLM
“Can I overwrite a Page Rule entirely with a new target and set of actions?”
“Does replacing a Page Rule drop any settings I leave out of the request?”
Tell an agent
Replace Page Rule {rule} on zone {zone} with targets {targets} and actions {actions}.
Fully overwrite the configuration of Page Rule {rule} using actions {actions} and targets {targets}.
GET
/zones/{zone_id}/pagerules/settings
List settings Page Rules can apply · Cloudflare List available Page Rules settings
#
Ask an LLM
“Which actions can a Page Rule apply to matching requests on my zone?”
“What settings are available to use inside a Page Rule?”
Tell an agent
List the available Page Rules settings for zone {zone}.
Show every action type I can put in a Page Rule.
Ask an LLM
“How do I clear everything from the Cloudflare cache for my site?”
“Can I purge just a few URLs instead of the whole cache?”
Tell an agent destructive · confirm first
Purge all cached files for zone {zone}.
Clear the edge cache for my zone {zone} after the deploy.
Ask an LLM
“What rulesets are deployed at the zone level on my site?”
“Which phases have custom or managed rulesets attached to this zone?”
Tell an agent
List all zone-level rulesets on zone {zone}.
Show me every ruleset configured for this zone.
Ask an LLM
“How do I create a new ruleset scoped to one zone?”
“Can I build a zone ruleset for a specific phase with its own list of rules?”
Tell an agent
Create a zone ruleset named {name} in phase {phase} on zone {zone} with rules {rules}.
Add a new {kind} ruleset called {name} to my zone.
DELETE
/zones/{zone_id}/rulesets/{ruleset_id}
Delete a zone ruleset and all versions · Cloudflare Delete a zone ruleset
#
Ask an LLM
“Will deleting a zone ruleset remove all of its versions?”
“What wipes out a custom zone ruleset entirely?”
Tell an agent destructive · confirm first
Delete zone ruleset {ruleset} and all its versions from zone {zone}.
Permanently remove ruleset {ruleset} from my zone.
GET
/zones/{zone_id}/rulesets/{ruleset_id}
Get the latest version of a zone ruleset · Cloudflare Get a zone ruleset
#
Ask an LLM
“What rules are in the current version of a zone ruleset?”
“Can I read a zone ruleset by its ID to check its phase and kind?”
Tell an agent
Get zone ruleset {ruleset} on zone {zone}.
Show the latest rules in ruleset {ruleset}.
PUT
/zones/{zone_id}/rulesets/{ruleset_id}
Update a zone ruleset as a new version · Cloudflare Update a zone ruleset
#
Ask an LLM
“Does updating a zone ruleset create a new version rather than editing in place?”
“How do I replace the full list of rules in an existing zone ruleset?”
Tell an agent
Update zone ruleset {ruleset} on zone {zone} with rules {rules}.
Change the description of ruleset {ruleset} to {description}.
POST
/zones/{zone_id}/rulesets/{ruleset_id}/rules
Add a rule to a zone ruleset · Cloudflare Create a zone ruleset rule
#
Ask an LLM
“How do I add one more rule to an existing zone ruleset?”
“Can I choose where a new rule is inserted instead of appending it at the end?”
Tell an agent
Add a rule to zone ruleset {ruleset} on zone {zone}.
Insert a new rule into ruleset {ruleset} at position {position}.
DELETE
/zones/{zone_id}/rulesets/{ruleset_id}/rules/{rule_id}
Delete a rule from a zone ruleset · Cloudflare Delete a zone ruleset rule
#
Ask an LLM
“Can I remove a single rule from a zone ruleset without deleting the ruleset?”
“What removes one rule by ID from my zone ruleset?”
Tell an agent destructive · confirm first
Delete rule {rule} from zone ruleset {ruleset} on zone {zone}.
Remove rule {rule} from ruleset {ruleset}.
PATCH
/zones/{zone_id}/rulesets/{ruleset_id}/rules/{rule_id}
Update a rule in a zone ruleset · Cloudflare Update a zone ruleset rule
#
Ask an LLM
“How do I edit one existing rule inside a zone ruleset?”
“Can I move an existing rule to a different position in the ruleset?”
Tell an agent
Update rule {rule} in zone ruleset {ruleset} on zone {zone}.
Move existing rule {rule} in ruleset {ruleset} to position {position}.
GET
/zones/{zone_id}/rulesets/{ruleset_id}/versions
List versions of a zone ruleset · Cloudflare List a zone ruleset's versions
#
Ask an LLM
“What is the version history of a zone ruleset?”
“How many versions has one of my zone rulesets gone through?”
Tell an agent
List the versions of zone ruleset {ruleset} on zone {zone}.
Show the change history of ruleset {ruleset}.
DELETE
/zones/{zone_id}/rulesets/{ruleset_id}/versions/{ruleset_version}
Delete a zone ruleset version · Cloudflare Delete a zone ruleset version
#
Ask an LLM
“Can I delete one old version of a zone ruleset but keep the rest?”
“What removes a single version from a zone ruleset's history?”
Tell an agent destructive · confirm first
Delete version {version} of zone ruleset {ruleset} on zone {zone}.
Remove old version {version} from ruleset {ruleset}.
GET
/zones/{zone_id}/rulesets/{ruleset_id}/versions/{ruleset_version}
Get a specific zone ruleset version · Cloudflare Get a zone ruleset version
#
Ask an LLM
“What did a zone ruleset look like at an earlier version?”
“Can I fetch an older version of a zone ruleset to compare rules?”
Tell an agent
Get version {version} of zone ruleset {ruleset} on zone {zone}.
Show the rules in ruleset {ruleset} as of version {version}.
GET
/zones/{zone_id}/rulesets/phases/{ruleset_phase}/entrypoint
Get a zone's entry point ruleset for a phase · Cloudflare Get a zone entry point ruleset
#
Ask an LLM
“What rules run in my zone's entry point ruleset for the request firewall phase?”
“Which ruleset is the entry point for a given phase on this zone?”
Tell an agent
Get the entry point ruleset for phase {phase} on zone {zone}.
Show the current zone entry point rules for the {phase} phase.
PUT
/zones/{zone_id}/rulesets/phases/{ruleset_phase}/entrypoint
Update a zone's entry point ruleset for a phase · Cloudflare Update a zone entry point ruleset
#
Ask an LLM
“How do I set the rules that run at the entry point of a phase on my zone?”
“Does changing a zone entry point ruleset create a new version of it?”
Tell an agent
Update the zone {zone} entry point ruleset for phase {phase} with rules {rules}.
Replace the entry point rules for phase {phase} on my zone.
GET
/zones/{zone_id}/rulesets/phases/{ruleset_phase}/entrypoint/versions
List versions of a zone entry point ruleset · Cloudflare List a zone entry point ruleset's versions
#
Ask an LLM
“What is the version history of my zone's entry point ruleset for a phase?”
“How has the phase entry point ruleset changed over time?”
Tell an agent
List versions of the entry point ruleset for phase {phase} on zone {zone}.
Show the entry point history for phase {phase}.
GET
/zones/{zone_id}/rulesets/phases/{ruleset_phase}/entrypoint/versions/{ruleset_version}
Get a version of a zone entry point ruleset · Cloudflare Get a zone entry point ruleset version
#
Ask an LLM
“Can I look at an older version of a phase entry point ruleset on my zone?”
“What rules did the entry point for a phase contain at a past version?”
Tell an agent
Get version {version} of the phase {phase} entry point ruleset on zone {zone}.
Show entry point version {version} for phase {phase}.
POST
/zones/{zone_id}/secondary_dns/force_axfr
Force a zone transfer from the primary · Cloudflare Force AXFR
#
Ask an LLM
“How do I make my secondary zone pull a fresh copy from the primary nameserver right now?”
“Can I trigger an AXFR on demand instead of waiting for the refresh interval?”
Tell an agent
Force an AXFR zone transfer for secondary zone {zone}.
Request an immediate full transfer from my primary nameservers.
DELETE
/zones/{zone_id}/secondary_dns/incoming
Delete incoming secondary zone configuration · Cloudflare Delete Secondary Zone Configuration
#
Ask an LLM
“How do I stop my zone from acting as a secondary and receiving transfers?”
“Can I remove the incoming zone transfer configuration?”
Tell an agent destructive · confirm first
Delete the incoming zone transfer configuration for zone {zone}.
Remove my secondary DNS setup.
GET
/zones/{zone_id}/secondary_dns/incoming
Get incoming secondary zone configuration · Cloudflare Secondary Zone Configuration Details
#
Ask an LLM
“Which primary peers and refresh interval is my secondary zone using?”
“What is the incoming zone transfer setup for this zone?”
Tell an agent
Get the incoming zone transfer configuration for zone {zone}.
Show my secondary DNS peers and auto refresh seconds.
POST
/zones/{zone_id}/secondary_dns/incoming
Create incoming secondary zone configuration · Cloudflare Create Secondary Zone Configuration
#
Ask an LLM
“How do I set up my zone as a secondary that receives transfers from an external primary?”
“What do I need to supply to start incoming zone transfers for the first time?”
Tell an agent
Create an incoming zone transfer config {name} on zone {zone} from peers {peers} refreshing every {seconds} seconds.
Set up secondary DNS for the first time with config id {id} and peers {peers}.
PUT
/zones/{zone_id}/secondary_dns/incoming
Update incoming secondary zone configuration · Cloudflare Update Secondary Zone Configuration
#
Ask an LLM
“Can I change the primary peers my existing secondary zone pulls from?”
“How do I adjust the auto refresh interval on an existing secondary zone?”
Tell an agent
Update secondary zone {zone} to transfer from peers {peers} every {seconds} seconds.
Change the existing incoming transfer config {id} named {name} to use peers {peers}.
DELETE
/zones/{zone_id}/secondary_dns/outgoing
Delete outgoing primary zone configuration · Cloudflare Delete Primary Zone Configuration
#
Ask an LLM
“Can I remove the outgoing zone transfer setup from my primary zone?”
“What deletes the primary zone configuration for secondary DNS?”
Tell an agent destructive · confirm first
Delete the outgoing zone transfer configuration for zone {zone}.
Remove my primary zone transfer configuration entirely.
GET
/zones/{zone_id}/secondary_dns/outgoing
Get outgoing primary zone configuration · Cloudflare Primary Zone Configuration Details
#
Ask an LLM
“Which secondary nameservers is my primary zone configured to send transfers to?”
“What does the outgoing zone transfer configuration look like?”
Tell an agent
Get the outgoing zone transfer configuration for primary zone {zone}.
Show which peers receive transfers from my primary zone.
POST
/zones/{zone_id}/secondary_dns/outgoing
Create outgoing primary zone configuration · Cloudflare Create Primary Zone Configuration
#
Ask an LLM
“How do I make my zone a primary that sends transfers to external secondary nameservers?”
“What is needed to set up outgoing zone transfers for the first time?”
Tell an agent
Create an outgoing zone transfer config {name} on zone {zone} for peers {peers}.
Set up my zone as a DNS primary with config id {id} sending to {peers}.
PUT
/zones/{zone_id}/secondary_dns/outgoing
Update outgoing primary zone configuration · Cloudflare Update Primary Zone Configuration
#
Ask an LLM
“Can I change which secondary peers receive transfers from my existing primary zone?”
“How do I rename an existing outgoing transfer configuration?”
Tell an agent
Update primary zone {zone} to send outgoing transfers to peers {peers}.
Change existing outgoing config {id} to name {name} with peers {peers}.
POST
/zones/{zone_id}/secondary_dns/outgoing/disable
Disable outgoing zone transfers · Cloudflare Disable Outgoing Zone Transfers
#
Ask an LLM
“How do I pause transfers from my primary zone to its secondaries?”
“Does turning off outgoing zone transfers clear the IXFR backlog?”
Tell an agent destructive · confirm first
Disable outgoing zone transfers for primary zone {zone}.
Stop sending zone transfers to my secondary nameservers and clear the backlog.
POST
/zones/{zone_id}/secondary_dns/outgoing/enable
Enable outgoing zone transfers · Cloudflare Enable Outgoing Zone Transfers
#
Ask an LLM
“How do I start sending transfers from my primary zone to secondary nameservers?”
“Can I turn outgoing zone transfers back on after disabling them?”
Tell an agent
Enable outgoing zone transfers for primary zone {zone}.
Resume zone transfers to my secondary peers.
POST
/zones/{zone_id}/secondary_dns/outgoing/force_notify
Send a DNS NOTIFY to secondaries · Cloudflare Force DNS NOTIFY
#
Ask an LLM
“How can I tell my secondary nameservers right away that the primary zone changed?”
“Is there a way to force a NOTIFY and clear the IXFR backlog?”
Tell an agent
Force a DNS NOTIFY to the secondaries of primary zone {zone}.
Notify my secondary nameservers of changes now.
GET
/zones/{zone_id}/secondary_dns/outgoing/status
Get outgoing zone transfer status · Cloudflare Get Outgoing Zone Transfer Status
#
Ask an LLM
“Are outgoing zone transfers from my primary zone currently enabled?”
“What is the transfer status of my primary zone?”
Tell an agent
Get the outgoing zone transfer status for zone {zone}.
Check whether my primary zone is sending transfers.
Ask an LLM
“What are all the current settings on my zone in one call?”
“Can I see every zone setting and whether it is editable?”
Tell an agent
Get all zone settings for zone {zone}.
Dump every setting currently applied to my site.
PATCH
/zones/{zone_id}/settings
Edit several zone settings at once · Cloudflare Edit zone settings info
#
Ask an LLM
“Can I change several zone settings in a single request?”
“How do I bulk-update multiple settings on a zone?”
Tell an agent
Apply the settings {items} to zone {zone} in one request.
Bulk edit my zone's settings with {items}.
GET
/zones/{zone_id}/settings/0rtt
Get the 0-RTT session resumption setting · Cloudflare Get 0-RTT session resumption setting
#
Ask an LLM
“Is 0-RTT session resumption enabled for my zone?”
“What is the current 0-RTT value on this site?”
Tell an agent
Get the 0-RTT setting for zone {zone}.
Check whether 0-RTT resumption is on.
PATCH
/zones/{zone_id}/settings/0rtt
Change 0-RTT session resumption · Cloudflare Change 0-RTT session resumption setting
#
Ask an LLM
“How do I enable 0-RTT so returning visitors reconnect faster?”
“Can I turn off 0-RTT session resumption for my zone?”
Tell an agent
Set 0-RTT session resumption to {value} on zone {zone}.
Turn 0-RTT {value} for my site.
GET
/zones/{zone_id}/settings/advanced_ddos
Check Advanced DDoS protection status · Cloudflare Get Advanced DDOS setting
#
Ask an LLM
“Is advanced DDoS protection active on my zone?”
“Can I change the Advanced DDoS setting, or is it read-only?”
Tell an agent
Get the Advanced DDoS setting for zone {zone}.
Show whether my site has advanced DDoS attack protection.
GET
/zones/{zone_id}/settings/always_online
Get the Always Online setting · Cloudflare Get Always Online setting
#
Ask an LLM
“Will visitors see an archived copy of my pages if my origin goes down?”
“Is Always Online currently enabled for this zone?”
Tell an agent
Get the Always Online setting for zone {zone}.
Check if Always Online is serving cached copies when my server is offline.
PATCH
/zones/{zone_id}/settings/always_online
Turn Always Online on or off · Cloudflare Change Always Online setting
#
Ask an LLM
“Can I have Cloudflare serve Wayback Machine copies of my pages when my server is down?”
“How do I disable Always Online for my site?”
Tell an agent
Set Always Online to {value} on zone {zone}.
Turn Always Online {value} so archived pages show during outages.
GET
/zones/{zone_id}/settings/always_use_https
Get the Always Use HTTPS setting · Cloudflare Get Always Use HTTPS setting
#
Ask an LLM
“Are plain http requests to my site being redirected to https?”
“Is Always Use HTTPS enabled on this zone?”
Tell an agent
Get the Always Use HTTPS setting for zone {zone}.
Check whether http URLs get a 301 to https.
PATCH
/zones/{zone_id}/settings/always_use_https
Turn Always Use HTTPS on or off · Cloudflare Change Always Use HTTPS setting
#
Ask an LLM
“How do I force every http request on my site to redirect to https?”
“Can I stop the automatic 301 redirect from http to https?”
Tell an agent
Set Always Use HTTPS to {value} on zone {zone}.
Redirect all http traffic to https by turning Always Use HTTPS {value}.
GET
/zones/{zone_id}/settings/automatic_https_rewrites
Get the Automatic HTTPS Rewrites setting · Cloudflare Get Automatic HTTPS Rewrites setting
#
Ask an LLM
“Is Automatic HTTPS Rewrites fixing mixed content links on my pages?”
“What is the current Automatic HTTPS Rewrites value?”
Tell an agent
Get the Automatic HTTPS Rewrites setting for zone {zone}.
Check whether mixed-content http links are rewritten to https.
PATCH
/zones/{zone_id}/settings/automatic_https_rewrites
Turn Automatic HTTPS Rewrites on or off · Cloudflare Change Automatic HTTPS Rewrites setting
#
Ask an LLM
“Can I have insecure http links in my HTML rewritten to https automatically?”
“What switches Automatic HTTPS Rewrites off for a zone?”
Tell an agent
Set Automatic HTTPS Rewrites to {value} on zone {zone}.
Turn Automatic HTTPS Rewrites {value} to fix mixed content.
GET
/zones/{zone_id}/settings/automatic_platform_optimization
Get the APO for WordPress setting · Cloudflare Get Automatic Platform Optimization for WordPress setting
#
Ask an LLM
“Is Automatic Platform Optimization for WordPress enabled on my site?”
“What APO options (cache by device, hostnames) are set for this zone?”
Tell an agent
Get the Automatic Platform Optimization setting for zone {zone}.
Show my WordPress APO configuration.
PATCH
/zones/{zone_id}/settings/automatic_platform_optimization
Change APO for WordPress · Cloudflare Change Automatic Platform Optimization for WordPress setting
#
Ask an LLM
“How do I enable Automatic Platform Optimization for my WordPress site?”
“Can I update which hostnames APO for WordPress applies to?”
Tell an agent
Set Automatic Platform Optimization on zone {zone} to {value}.
Update my WordPress APO settings to {value}.
GET
/zones/{zone_id}/settings/brotli
Get the Brotli compression setting · Cloudflare Get Brotli setting
#
Ask an LLM
“Is Brotli compression turned on for my zone?”
“Are visitors that support Brotli getting Brotli-compressed assets?”
Tell an agent
Get the Brotli setting for zone {zone}.
Check if Brotli compression is enabled.
Documentation
📖
Documentation
https://developers.cloudflare.com/api/
📖
GettingStarted
https://developers.cloudflare.com/fundamentals/api/get-started/
📖
Authentication
https://developers.cloudflare.com/fundamentals/api/get-started/create-token/
📖
RateLimits
https://developers.cloudflare.com/fundamentals/api/reference/limits/
📖
Documentation
https://developers.cloudflare.com/api/operations/accounts-list-accounts
📖
APIReference
https://developers.cloudflare.com/api/resources/accounts/
📖
APIReference
https://developers.cloudflare.com/ssl/
📖
Documentation
https://developers.cloudflare.com/api/operations/ip-access-rules-for-a-user-list-ip-access-rules
📖
Documentation
https://developers.cloudflare.com/api/operations/user'-s-account-memberships-list-memberships
📖
Documentation
https://developers.cloudflare.com/api/operations/radar-get-search-global
📖
APIReference
https://developers.cloudflare.com/radar/
📖
GettingStarted
https://developers.cloudflare.com/radar/get-started/
📖
Documentation
https://developers.cloudflare.com/api/operations/user-user-details
📖
APIReference
https://developers.cloudflare.com/api/resources/user/
📖
Documentation
https://developers.cloudflare.com/api/operations/zones-get
📖
APIReference
https://developers.cloudflare.com/api/resources/zones/
📖
Documentation
https://developers.cloudflare.com/dns/
📖
APIReference
https://developers.cloudflare.com/api/resources/dns/
📖
Documentation
https://developers.cloudflare.com/workers/
📖
APIReference
https://developers.cloudflare.com/api/resources/workers/
📖
GettingStarted
https://developers.cloudflare.com/workers/get-started/
📖
Documentation
https://developers.cloudflare.com/workers-ai/
📖
GettingStarted
https://developers.cloudflare.com/workers-ai/get-started/rest-api/
📖
APIReference
https://developers.cloudflare.com/workers-ai/configuration/open-ai-compatibility/
📖
APIReference
https://developers.cloudflare.com/workers-ai/models/
📖
Documentation
https://developers.cloudflare.com/ai-gateway/
📖
APIReference
https://developers.cloudflare.com/ai-gateway/usage/providers/
📖
GettingStarted
https://developers.cloudflare.com/ai-gateway/get-started/
📖
Documentation
https://developers.cloudflare.com/r2/
📖
APIReference
https://developers.cloudflare.com/r2/api/s3/api/
📖
GettingStarted
https://developers.cloudflare.com/r2/get-started/
📖
Documentation
https://developers.cloudflare.com/d1/
📖
APIReference
https://developers.cloudflare.com/api/resources/d1/
📖
GettingStarted
https://developers.cloudflare.com/d1/get-started/
📖
Documentation
https://developers.cloudflare.com/kv/
📖
APIReference
https://developers.cloudflare.com/api/resources/kv/
📖
GettingStarted
https://developers.cloudflare.com/kv/get-started/
📖
Documentation
https://developers.cloudflare.com/queues/
📖
APIReference
https://developers.cloudflare.com/api/resources/queues/
📖
GettingStarted
https://developers.cloudflare.com/queues/get-started/
📖
Documentation
https://developers.cloudflare.com/durable-objects/
📖
GettingStarted
https://developers.cloudflare.com/durable-objects/get-started/
📖
APIReference
https://developers.cloudflare.com/durable-objects/api/
📖
Documentation
https://developers.cloudflare.com/vectorize/
📖
GettingStarted
https://developers.cloudflare.com/vectorize/get-started/intro/
📖
APIReference
https://developers.cloudflare.com/vectorize/reference/client-api/
📖
Documentation
https://developers.cloudflare.com/pages/
📖
APIReference
https://developers.cloudflare.com/pages/configuration/api/
📖
GettingStarted
https://developers.cloudflare.com/pages/get-started/
📖
Documentation
https://developers.cloudflare.com/stream/
📖
GettingStarted
https://developers.cloudflare.com/stream/get-started/
📖
APIReference
https://developers.cloudflare.com/api/resources/stream/
📖
Documentation
https://developers.cloudflare.com/images/
📖
GettingStarted
https://developers.cloudflare.com/images/get-started/
📖
APIReference
https://developers.cloudflare.com/api/resources/images/
📖
Documentation
https://developers.cloudflare.com/turnstile/
📖
GettingStarted
https://developers.cloudflare.com/turnstile/get-started/
📖
APIReference
https://developers.cloudflare.com/api/resources/turnstile/
📖
Documentation
https://developers.cloudflare.com/logs/
📖
APIReference
https://developers.cloudflare.com/api/resources/logpush/
📖
GettingStarted
https://developers.cloudflare.com/logs/get-started/
📖
Documentation
https://developers.cloudflare.com/hyperdrive/
📖
APIReference
https://developers.cloudflare.com/api/resources/hyperdrive/
📖
GettingStarted
https://developers.cloudflare.com/hyperdrive/get-started/
Specifications
⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/cloudflare/refs/heads/main/openapi/cloudflare-zones-api-openapi.yml
⚙
AsyncAPI
https://raw.githubusercontent.com/api-evangelist/cloudflare/refs/heads/main/asyncapi/cloudflare-notifications-webhooks-asyncapi.yml
⚙
AsyncAPI
https://raw.githubusercontent.com/api-evangelist/cloudflare/refs/heads/main/asyncapi/cloudflare-stream-webhooks-asyncapi.yml
Schemas & Data
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cloudflare/refs/heads/main/json-schema/cloudflare-zones-zone-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cloudflare/refs/heads/main/json-schema/cloudflare-load-balancing-rules-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cloudflare/refs/heads/main/json-schema/cloudflare-tls-certificates-and-hostnames-sslpost-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cloudflare/refs/heads/main/json-schema/cloudflare-load-balancing-session-affinity-attributes-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cloudflare/refs/heads/main/json-schema/cloudflare-zones-zone-settings-response-collection-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/cloudflare/refs/heads/main/json-schema/cloudflare-zones-setting-schema.json