Cloudflare

List the websites in your Cloudflare account, with optional search and filters.

Get the full details and status of one website.

Add a new website to Cloudflare.

Change a website's settings such as its plan or custom name servers.

Permanently remove a website from Cloudflare.

Ask Cloudflare to re-check whether a pending website's name servers are now pointed correctly.

Clear Cloudflare's cached copies of a website so visitors get fresh content.

See all of a website's Cloudflare configuration settings at once.

Check the current value of a single website setting.

Change the value of a single website setting.

Change several website settings in a single update.

Check whether a website is currently in development (cache-bypass) mode.

Turn on development mode so a website skips Cloudflare's cache for 3 hours.

List the DNS records for a website.

Get the details of one DNS record.

Add a new DNS record to a website.

Replace a DNS record with new values.

Change only specific fields of a DNS record, leaving the rest as-is.

Permanently delete a DNS record from a website.

Download all of a website's DNS records as a standard zone file.

Automatically detect a website's existing DNS records and add them to Cloudflare.

Add, change, and delete many DNS records for a website in one operation.

See totals of DNS query activity for a website over a time range.

See DNS query activity for a website broken down over time.

Show the legacy firewall rules that decide which visitors are blocked or challenged on a website.

Show the details of one specific legacy firewall rule.

Add one or more legacy firewall rules that block or challenge matching visitors.

Change the settings of one existing legacy firewall rule.

Change several existing legacy firewall rules in one request.

Change the order in which one legacy firewall rule is evaluated.

Reorder several legacy firewall rules at once.

Permanently remove one legacy firewall rule, which stops it from protecting the site.

Permanently remove several legacy firewall rules at once.

Show the saved match conditions (filters) that firewall rules can reference.

Show one specific saved match condition (filter).

Create one or more reusable match conditions for firewall rules.

Change one existing saved match condition (filter).

Change several saved match conditions in one request.

Permanently remove one saved match condition (filter).

Permanently remove several saved match conditions at once.

Show the IP, country, or network access rules that allow, block, or challenge visitors on a website.

Show the details of one IP access rule on a website.

Add a rule that allows, blocks, or challenges a specific IP, network, country, or ASN on a website.

Change the action or notes of one IP access rule on a website.

Permanently remove one IP access rule from a website.

Show the account-wide IP, country, or network access rules that apply across all your websites.

Add an account-wide rule that allows, blocks, or challenges an IP, network, country, or ASN across all your websites.

Change the action or notes of one account-wide IP access rule.

Permanently remove one account-wide IP access rule.

Show the rules that block or challenge visitors based on their browser/user-agent string.

Show the details of one user-agent blocking rule.

Add a rule that blocks or challenges visitors using a specific browser/user-agent.

Change one existing user-agent blocking rule.

Permanently remove one user-agent blocking rule.

Show the zone lockdown rules that restrict specific URLs to trusted IP addresses.

Show the details of one zone lockdown rule.

Lock down specific URLs so only listed IP addresses can reach them.

Change one existing zone lockdown rule.

Permanently remove one zone lockdown rule, reopening those URLs to all visitors.

Show all the rule sets configured for a single website, including WAF and rate-limiting phases.

Show all account-level rule sets, including Cloudflare's managed WAF rule sets available to deploy.

Show one website rule set with all of its rules.

Show one account rule set (such as a managed WAF rule set) with all of its rules.

Create a new rule set for a website in a chosen processing phase.

Create a new account-level rule set in a chosen processing phase.

Replace the rules or properties of a website rule set, creating a new version.

Replace the rules or properties of an account rule set, creating a new version.

Permanently remove a website rule set and every version of it, which can turn off its protection.

Permanently remove an account rule set and every version of it.

Show the version history of a website rule set.

Show the version history of an account rule set.

Show a specific past version of a website rule set with its rules.

Show a specific past version of an account rule set with its rules.

Permanently remove one past version of a website rule set.

Permanently remove one past version of an account rule set.

Add a single rule to an existing website rule set.

Add a single rule to an existing account rule set.

Change one rule inside a website rule set.

Change one rule inside an account rule set.

Permanently remove one rule from a website rule set, which stops it from protecting the site.

Permanently remove one rule from an account rule set.

Show the active rule set for a website's processing phase, such as custom WAF or rate limiting.

Show the active account-level rule set for a chosen processing phase.

Set the rules for a website's processing phase, such as adding custom WAF or rate-limiting rules.

Set the rules for an account-level processing phase across your websites.

Show the version history of a website's processing-phase rule set.

Show the version history of an account processing-phase rule set.

Show a specific past version of a website's processing-phase rule set.

Show a specific past version of an account processing-phase rule set.

Check whether the security certificates for a website are validated and active.

Choose how a website's security certificate is verified (for example by DNS record or email).

See whether the free automatic security certificate is turned on for a website.

Turn the free automatic security certificate on or off for a website.

List the customer-uploaded security certificates installed on a website.

View details of one uploaded security certificate on a website.

Upload your own security certificate and private key for a website.

Replace or reconfigure an uploaded security certificate on a website.

Remove an uploaded security certificate from a website.

Set which uploaded certificate is preferred when several could serve a request.

List the certificates issued for securing traffic between Cloudflare and your origin server.

Issue a certificate to secure traffic between Cloudflare and your origin server.

View one certificate that secures traffic to your origin server.

Revoke a certificate that secures traffic to your origin server.

List the bundles of security certificates protecting a website.

View one bundle of security certificates for a website.

Order an advanced security certificate bundle covering specific hostnames for a website.

Restart the verification of an advanced certificate bundle, or change its verification method.

Delete an advanced security certificate bundle from a website.

See how many advanced certificate bundles a website has used and has left.

Check how broadly a security certificate will be trusted across browsers and devices.

Get Cloudflare's suggested encryption setting for a website.

See whether automatic certificates for all subdomains are turned on for a website.

Turn automatic certificates for all subdomains on or off for a website.

List the custom URL-based rules configured for a website.

Create a rule that changes how a website behaves for URLs matching a pattern.

View one custom URL rule for a website.

Fully rewrite a custom URL rule for a website.

Change part of a custom URL rule for a website.

Delete a custom URL rule from a website.

List the actions that can be applied in a website's URL rules.

View all configuration settings for a website in one place.

See whether visitors are automatically sent to the secure version of a website.

Turn on or off automatically sending visitors to the secure version of a website.

See the oldest allowed encryption version visitors can use to reach a website.

Set the oldest allowed encryption version visitors can use to reach a website.

See the encryption mode used between visitors, Cloudflare, and the origin server.

Change the encryption mode between visitors, Cloudflare, and the origin server.

See how aggressively a website challenges suspicious visitors.

Change how aggressively a website challenges suspicious visitors.

See how much of a website's content Cloudflare stores to speed up loading.

Change how much of a website's content Cloudflare stores to speed up loading.

See how long visitors' browsers are told to keep a website's files.

Change how long visitors' browsers are told to keep a website's files.

Turn on or off temporarily bypassing Cloudflare's cache for editing a website.

See whether the website's built-in firewall protection is turned on.

Turn the website's built-in firewall protection on or off.

See whether insecure links on a website are automatically upgraded to secure ones.

Turn on or off automatically upgrading insecure links on a website to secure ones.

See whether a website offers optional extra encryption to capable browsers.

Turn on or off offering optional extra encryption to capable browsers.

See whether the newest encryption standard is enabled for a website.

Turn the newest encryption standard on or off for a website.

See whether a cached copy of a website is shown when the origin server is down.

Turn on or off showing a cached copy of a website when the origin server is down.

See whether the faster HTTP/2 connection standard is enabled for a website.

Turn the faster HTTP/2 connection standard on or off for a website.

See whether the newest HTTP/3 connection standard is enabled for a website.

Turn the newest HTTP/3 connection standard on or off for a website.

See whether Brotli compression is used to speed up a website.

Turn Brotli compression on or off to speed up a website.

See whether Cloudflare automatically manages the website's encryption mode.

Turn on or off letting Cloudflare automatically manage the website's encryption mode.

Show all of the small programs (Workers) running in your account.

Find Workers in your account by name or other criteria.

View the code of one of your Workers.

See a Worker's configuration such as its variables, bindings, and tags.

Change a Worker's configuration (its variables, bindings, or tags) without re-uploading the code.

Permanently remove a Worker, taking it offline.

See the recurring schedules that automatically run a Worker.

Set the recurring schedules that automatically run a Worker.

Show which website URLs are handled by Workers for a domain.

Point a website URL pattern at one of your Workers.

View one Worker route for a domain.

Change which URL pattern or Worker a route uses.

Remove a Worker route so that URL pattern is no longer handled by a Worker.

Show your Workers key-value storage collections.

View details of one key-value storage collection.

Create a new key-value storage collection for Workers.

Rename a key-value storage collection.

Permanently delete a key-value storage collection and everything stored in it.

List the stored keys in a key-value collection.

Read the stored value for a single key.

Read the extra metadata attached to a single stored key.

Save or overwrite the value for a single key.

Delete a single stored key and its value.

Save or overwrite many keys and values at once.

Read the values for many keys at once.

Delete many stored keys at once.

Show all of your Cloudflare Pages websites.

View details and settings of one Pages website.

Create a new Cloudflare Pages website.

Change the settings of a Pages website, such as its build configuration or environment variables.

Permanently delete a Pages website.

Show the deployment history for a Pages website.

View details of one Pages deployment.

Trigger a fresh build and deployment of a Pages website.

Permanently remove one deployment of a Pages website.

Re-run a previous Pages deployment build.

Revert the live Pages website back to an earlier successful deployment.

View the build and deployment logs for one Pages deployment.

Show the custom domains attached to a Pages website.

Attach a custom domain to a Pages website.

View the status of one custom domain on a Pages website.

Re-check and validate a custom domain that was added to a Pages website.

Remove a custom domain from a Pages website.

Show your Cloudflare Queues (message queues used by Workers).

Create a new message queue.

View details of one message queue.

Rename a message queue or change its delivery settings.

Permanently delete a message queue and its messages.

Show which Workers pull messages from a queue.

Attach a Worker so it processes messages from a queue.

Change how a Worker processes messages from a queue.

Detach a Worker so it stops processing messages from a queue.

Add a single message to a queue.

Add several messages to a queue at once.

Retrieve a batch of messages from a queue to process them.

Mark pulled messages as done, or send them back for retry.

Permanently delete all messages currently in a queue.

Show all the Cloudflare accounts you can access.

Show details for one specific account.

Change an account's name or basic settings.

List the people who have access to an account.

Show details about one person's access to an account.

Invite a new person to access an account.

Change a person's roles or status on an account.

Remove a person's access to an account.

List the permission roles available on an account.

Show what a specific permission role can do.

List the API access tokens on your user profile.

Create a new API access token with chosen permissions.

Show details of one API access token.

Change an API token's name, permissions, or status.

Permanently delete an API access token.

Check that the current API token is valid and active.

Generate a brand-new secret value for a token, invalidating the old one.

List the permission groups you can grant to an API token.

List the traffic load balancers set up on a website.

Create a load balancer to spread website traffic across server pools.

Show the configuration of one load balancer.

Change a load balancer's pools, steering, or settings.

Delete a load balancer, which stops routing that hostname's traffic.

List the server pools used by load balancers.

Create a pool of origin servers for a load balancer to send traffic to.

Show the configuration of one server pool.

Change a server pool's origins or settings.

Delete a server pool.

Show the current health of a server pool's origins.

Run an on-demand health check preview for a pool.

List the health-check monitors used by server pools.

Create a health check that watches whether servers are up.

Show the configuration of one health-check monitor.

Change a health-check monitor's settings.

Delete a health-check monitor.

Test a health-check monitor against a pool without saving changes.

List which pools use a given health-check monitor.

Fetch the results of a pool or monitor health-check preview.

List the geographic regions used for load balancer steering.

Show details for one load balancer steering region.

Search load balancers, pools, and monitors by keyword.

List the apps protected by Zero Trust Access.

Protect a new app or hostname behind Zero Trust Access.

Show the configuration of one Access-protected app.

Change the settings or policies of an Access-protected app.

Remove Zero Trust protection from an app.

Sign out all users from an Access-protected app by revoking their sessions.

List the reusable Zero Trust Access rules.

Create a reusable rule for who can reach Access-protected apps.

Show one reusable Access rule.

Change a reusable Access rule.

Delete a reusable Access rule.

List reusable groups of users for Zero Trust Access rules.

Create a reusable group of users for Access rules.

Show one Access user group.

Change an Access user group's membership rules.

Delete an Access user group.

List Spectrum apps that proxy TCP/UDP traffic for a website.

Create a Spectrum app to proxy and protect a TCP/UDP service.

Show the configuration of one Spectrum app.

Change a Spectrum app's proxy configuration.

Delete a Spectrum app, stopping that proxied service.

List the jobs that ship logs to your storage or analytics destination.

Set up a job that continuously exports logs to a destination.

Show the configuration of one log export job.

Change a log export job's destination or settings.

Delete a log export job, stopping that log delivery.

List log export jobs for a specific type of log.

List the fields available to export for a type of log.

Check whether a log export destination is configured correctly.

Check whether a Logpush job already uses a given destination.

Check that the chosen log fields and options are valid.

Request an ownership-verification file for a log export destination.

Confirm you own a log export destination using the challenge file.

List the alert rules that decide when you get notified.

Create an alert rule that notifies you when something happens.

Show one alert rule.

Change an alert rule's conditions or recipients.

Delete an alert rule so it no longer notifies anyone.

List the kinds of alerts you can subscribe to.

Show a log of alerts that were previously sent.

List the webhook destinations that alerts can be sent to.

Add a webhook destination for receiving alerts.

Show one webhook alert destination.

Change a webhook alert destination.

Delete a webhook alert destination.

List connected PagerDuty services for alerts.

Disconnect all PagerDuty services from alerts.

Show which alert delivery methods are available on the account.