Cloudflare · AsyncAPI Specification

Cloudflare Notifications Webhooks

Version 1.0

Cloudflare Notifications sends webhook events to configured endpoints when various alerts fire across your account. Webhooks deliver JSON payloads for events including DDoS attacks, SSL certificate expirations, origin health check failures, Workers errors, and many other alertable conditions. Professional and higher plans can configure generic webhooks or use pre-built integrations with Slack, Discord, PagerDuty, OpsGenie, and other services.

View Spec View on GitHub AI GatewayAPI GatewayArtificial IntelligenceCDNCloudContainersDDoS ProtectionDNSEdgeEdge ComputingObject StoragePlatformReal-Time CommunicationSecurityServerlessWeb PerformanceAsyncAPIWebhooksEvents

Channels

/webhook

publish onNotificationEvent

Receive Cloudflare notification webhook

Generic webhook channel that receives all notification events from Cloudflare. Each notification includes the alert type, alert data, and metadata about the notification policy that triggered it.

Messages

✉

DdosAttackL4Alert

DDoS Attack Layer 4 Alert

Notification of a Layer 4 DDoS attack detected and mitigated

✉

DdosAttackL7Alert

DDoS Attack Layer 7 Alert

Notification of a Layer 7 DDoS attack detected

✉

SslCertificateAlert

SSL Certificate Expiration Alert

Notification about an SSL certificate status change or upcoming expiration

✉

HealthCheckAlert

Origin Health Check Alert

Notification of an origin health status change

✉

WorkersAlert

Workers Alert

Notification about Workers script performance or error thresholds

✉

GenericNotification

Generic Notification

A generic notification event for any alert type

Servers

https

webhookEndpoint {webhookUrl}

Your configured webhook endpoint URL. Cloudflare sends HTTP POST requests to this URL when notification alerts fire. Validate incoming requests using the cf-webhook-auth header which contains your configured secret value.