https://cybertoolchain.io/tools/cloudflare New releases and features in Cloudflare, tracked by The Cyber Toolchain. en Wed, 04 Nov 2026 00:00:00 GMT https://developers.cloudflare.com/changelog/post/2026-11-04-personal-agent-policies/ https://developers.cloudflare.com/changelog/post/2026-11-04-personal-agent-policies/ Wed, 04 Nov 2026 00:00:00 GMT Cloudflare adds per-agent access controls for top Personal Agents under AI Crawler and Agent access policies⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Set per-agent access actions for individual top Personal Agents via Security > Settings > `AI Crawler and Agent access policies`, replacing the former 'Configure AI bot policies' setting.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Personal Agents now inherit the existing Agents policy by default, with Cloudflare recommending Allow (do not block) as the default action. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-11-03-waf-release/ https://developers.cloudflare.com/changelog/post/2026-11-03-waf-release/ Tue, 03 Nov 2026 00:00:00 GMT Cloudflare WAF adds a phpMyAdmin authentication bypass detection to the Managed Ruleset⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Cloudflare WAF adds a new detection for phpMyAdmin authentication bypass in the Cloudflare Managed Ruleset (rule `...13f91633`).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/scheduled-waf-release/ https://developers.cloudflare.com/changelog/post/scheduled-waf-release/ Tue, 03 Nov 2026 00:00:00 GMT Cloudflare WAF adds a new Generic Rules - Dangerous File Upload detection, effective 2026-11-10⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Cloudflare WAF adds a new 'Generic Rules - Dangerous File Upload' detection (rule ID `...7178209b`), deploying in Log mode on 2026-11-10.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-10-30-byoip-workers-subrequest-context/ https://developers.cloudflare.com/changelog/post/2026-10-30-byoip-workers-subrequest-context/ Fri, 30 Oct 2026 00:00:00 GMT Cloudflare Workers now preserves subrequest context for BYOIP destinations, keeping Bot Management and security rules accurate for original client traffic⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Workers subrequests to BYOIP-proxied hostnames now preserve the `CF-Worker` header and `cf.worker.upstream_zone` field, enabling consistent security rule evaluation across same-zone and cross-zone subrequests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Bot Management fields on BYOIP destination zones now reflect the original end-user connection rather than the internal Cloudflare service connection, so bot scores, verified bot status, and JA3/JA4 fingerprints represent the real client. • Cross-zone Workers subrequests to BYOIP destinations now set `CF-Connecting-IP` to the Workers client IP address `2a06:98c0:3600::103`; same-zone subrequests continue to reflect the original client IP through `CF-Connecting-IP`. Breaking changes: • Cross-zone Workers subrequests to Cloudflare-proxied BYOIP hostnames now set `CF-Connecting-IP` to `2a06:98c0:3600::103` instead of the original client IP. Any security rule or application logic on the destination zone that reads `CF-Connecting-IP` to allow/block specific IPs for cross-zone subrequest traffic must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Wed, 28 Oct 2026 07:59:34 GMT API surface changed: +12 endpoints, 55 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/firewall/payload_logging/key • New endpoint DELETE /accounts/{account_id}/realtime/kit/{app_id}/meetings/{meeting_id}/participants/{participant_id}/token • New endpoint DELETE /zones/{zone_id}/firewall/payload_logging/key • New endpoint GET /accounts/{account_id}/access/organizations/trust_settings • New endpoint GET /accounts/{account_id}/firewall/payload_logging/key • New endpoint GET /zones/{zone_id}/firewall/payload_logging/key • New endpoint PATCH /accounts/{account_id}/access/organizations/trust_settings • New endpoint PATCH /accounts/{account_id}/dns_settings/nameserver_sets/{nameserver_set_id} • New endpoint PUT /accounts/{account_id}/access/organizations/trust_settings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Wed, 28 Oct 2026 07:53:29 GMT Cloudflare adds HTML/Liquid Access page templates, Workflow jurisdictions, three new OpenTelemetry span APIs, and SQL introspection `include_attributes`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `include_attributes` query parameter to the SQL API introspection endpoint (`GET https://api.cloudflare.com/client/v4/analytics/sql/introspection`), returning discovered attribute keys and their types from the preceding seven days of data in an `attributes` response field.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `jurisdiction` field to `workflows` bindings in `wrangler.toml` / wrangler JSON config, supporting values `eu`, `us`, and `fedramp`, so Workflow instances only run and store data within that jurisdiction (requires Wrangler 4.152.0 or above). • Adds span.spanContext(), span.setStatus(status), and span.updateName(name) methods to custom spans in Workers, aligning with the OpenTelemetry span API and enabling trace/span ID correlation, status export, and dynamic span renaming. • Adds `onInterrupt: 'replay'` option to `WorkerJavaScriptBackend` in `@cloudflare/computer` (v0.7.0+), allowing agent workspaces to resume interrupted runs after a deploy or crash by replaying recorded call results. • Adds ctx.interrupt() support inside custom modules on `WorkerJavaScriptBackend`, enabling a function to pause a run until an external approval decision is supplied via workspace.runtime.respond(). • Adds workspace.runtime.pending() and workspace.runtime.respond() APIs to `@cloudflare/computer` for fetching and resolving pending approval calls in agent workspaces. • Adds `nameservers.type: 'cloudflare.advanced'` value to DNS settings endpoints (`/zones/{zone_id}/dns_settings` and `/accounts/{account_id}/dns_settings`) to represent Advanced Nameservers, replacing the previous `foundation_dns: true` boolean. • Supports fully custom HTML and Liquid templates for Cloudflare Access user-facing pages (login, identity-denied, forbidden, and command-line approval), assignable per application or as account defaults from the Cloudflare One dashboard. Breaking changes: • A Workflow's `jurisdiction` is set at creation time and cannot be changed afterwards; if an existing Workflow has a different jurisdiction, `wrangler deploy` and `wrangler versions upload` will stop before uploading. • DNS settings endpoints will stop accepting the `foundation_dns` boolean in a future API change; clients must migrate writes to `nameservers.type: 'cloudflare.advanced'`. Currently, requests that include both `nameservers.type` and `foundation_dns` with conflicting values are rejected. • Clients that treat `nameservers.type` as a closed enum must be updated to recognize the new `'cloudflare.advanced'` value or they will break when the seven-day rollout reaches their account. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-10-28-china-native-challenge-pages/ https://developers.cloudflare.com/changelog/post/2026-10-28-china-native-challenge-pages/ Wed, 28 Oct 2026 00:00:00 GMT Cloudflare China Network now serves Turnstile challenge widgets hosted inside Mainland China, eliminating cross-border requests for visitors there⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Challenge Pages on the China Network now use Turnstile widgets hosted in Mainland China, so visitors there complete challenges faster and more reliably without cross-border requests — no configuration change required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-10-25-emergency-waf-release/ https://developers.cloudflare.com/changelog/post/2026-10-25-emergency-waf-release/ Sun, 25 Oct 2026 00:00:00 GMT Breaking changes: • If you have a ruleset-level action override that applies Block, the new Brotli (`...ca706f3c`) and Next.js image optimizer (`...402fe5bb`) rules may begin blocking legitimate traffic immediately on deployment, despite their default Log action — review existing ruleset overrides before upgrading. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Sat, 24 Oct 2026 08:04:12 GMT API surface changed: +21 endpoints, −2 endpoints, 140 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/profile⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/email/domains/{email_domain_id} • New endpoint DELETE /zones/{zone_id}/settings/aegis • New endpoint GET /_heartbeat • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/matches/aggregate • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/profile • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/{priority_id}/matches/aggregate • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/{priority_id}/matches/series • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/relevance/aggregate • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/severity/aggregate Breaking changes: • Removed endpoint GET /api/v4/health • Removed endpoint POST /accounts/{account_id}/pay-bad-debt • DELETE /accounts/{account_id}/brand-protection/brands: response schema changed • DELETE /accounts/{account_id}/brand-protection/brands/patterns: response schema changed • DELETE /accounts/{account_id}/brand-protection/logos/{logo_id}: response schema changed • DELETE /accounts/{account_id}/brand-protection/queries: response schema changed • GET /accounts/{account_id}/brand-protection/alerts: response schema changed • GET /accounts/{account_id}/brand-protection/brands: response schema changed • GET /accounts/{account_id}/brand-protection/brands/patterns: response schema changed • GET /accounts/{account_id}/brand-protection/domain-info: response schema changed • GET /accounts/{account_id}/brand-protection/logo-matches: response schema changed • GET /accounts/{account_id}/brand-protection/logo-matches/download: response schema changed • GET /accounts/{account_id}/brand-protection/logos: response schema changed • GET /accounts/{account_id}/brand-protection/logos/{logo_id}: response schema changed • GET /accounts/{account_id}/brand-protection/matches: response schema changed • GET /accounts/{account_id}/brand-protection/matches/download: response schema changed • GET /accounts/{account_id}/brand-protection/queries: response schema changed • GET /accounts/{account_id}/brand-protection/recent-submissions: response schema changed • GET /accounts/{account_id}/brand-protection/submission-info: response schema changed • GET /accounts/{account_id}/brand-protection/total-queries: response schema changed • GET /accounts/{account_id}/brand-protection/tracked-domains: response schema changed • GET /accounts/{account_id}/brand-protection/url-info: response schema changed • GET /live: response schema changed • GET /ready: response schema changed • GET /signed-url: response schema changed • PATCH /accounts/{account_id}/brand-protection/alerts: response schema changed • PATCH /accounts/{account_id}/brand-protection/alerts/clear: response schema changed • PATCH /accounts/{account_id}/brand-protection/alerts/refute: response schema changed • PATCH /accounts/{account_id}/brand-protection/alerts/verify: response schema changed • PATCH /accounts/{account_id}/brand-protection/clear: response schema changed • PATCH /accounts/{account_id}/brand-protection/queries: response schema changed • PATCH /accounts/{account_id}/brand-protection/refute: response schema changed • PATCH /accounts/{account_id}/brand-protection/verify: response schema changed • POST /accounts/{account_id}/brand-protection/brands: response schema changed • POST /accounts/{account_id}/brand-protection/brands/patterns: response schema changed • POST /accounts/{account_id}/brand-protection/logos: response schema changed • POST /accounts/{account_id}/brand-protection/queries: request body changed; response schema changed • POST /accounts/{account_id}/brand-protection/queries/bulk: response schema changed • POST /accounts/{account_id}/brand-protection/queries/{query_id}/matches/{domain_id}/dismiss: response schema changed • POST /accounts/{account_id}/brand-protection/queries/{query_id}/matches/{domain_id}/undismiss: response schema changed • POST /accounts/{account_id}/brand-protection/scan-logo: response schema changed • POST /accounts/{account_id}/brand-protection/scan-page: response schema changed • POST /accounts/{account_id}/brand-protection/search: response schema changed • POST /accounts/{account_id}/brand-protection/submit: response schema changed • POST /internal/submit: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Wed, 21 Oct 2026 07:58:13 GMT API surface changed: +1 endpoint, 14 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint POST /accounts/{account_id}/managed-defense/vulnerability-discovery/repos/{repo_id}/token⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • GET /accounts/{account_id}/pipelines/v1/sinks: param direction (query) added; param order_by (query) added • GET /accounts/{account_id}/pipelines/v1/streams: param direction (query) added; param order_by (query) added Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-10-21-emergency-waf-release-free/ https://developers.cloudflare.com/changelog/post/2026-10-21-emergency-waf-release-free/ Wed, 21 Oct 2026 00:00:00 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-10-21-emergency-waf-release-cfmr/ https://developers.cloudflare.com/changelog/post/2026-10-21-emergency-waf-release-cfmr/ Wed, 21 Oct 2026 00:00:00 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Tue, 20 Oct 2026 07:54:31 GMT Cloudflare: Adds Workers AI models `@cf/cloudflare/clairic` (extraction, $0.10/M input tokens) and `@cf/deepseek-ai/deepseek-v4.1-flash-1017` (552B multimodal MoE).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds step-up authorization to the Cloudflare API MCP server: connect with minimal scopes and approve additional scopes on demand; the server returns an `insufficient_scope` challenge naming the required scope when a tool call needs one not yet granted; choose `Minimal` on the consent page to start with least access. • Improves Precursor (bot detection): the `Status` dropdown in Settings now offers `Off`, `Monitor`, and `Arm` modes, where `Monitor` runs Precursor detections without affecting bot score or Challenge clearance and `Arm` enables full enforcement; also adds a `Show Interstitial` site-wide default and `Interstitial Rules` per-request overrides, decoupling the Precursor Interstitial from the detection mode. • Adds Local Explorer support for Cron Triggers: a `POST /cdn-cgi/local/explorer/api/local/scheduled?worker=<worker-name>` API endpoint accepting a JSON body with `cron` and optional `scheduled_time` (epoch ms), available via `wrangler dev`, `cf dev`, or the Cloudflare Vite plugin; and a `Cron Triggers` panel in the Local Explorer UI at `/cdn-cgi/local/explorer` supporting ad hoc cron expression building, configured expression invocation, reusable scheduled time presets, and noRetry() outcome inspection, without modifying `cloudflare.config.ts` or deployed triggers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-10-19-precursor-monitor-mode/ https://developers.cloudflare.com/changelog/post/2026-10-19-precursor-monitor-mode/ Mon, 19 Oct 2026 00:00:00 GMT Cloudflare Precursor gains Monitor mode and a decoupled Interstitial Rules system for safer bot-score testing.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Monitor` option to the `Precursor Status` dropdown (under `Security > Settings`), letting traffic run through Precursor detections without affecting bot score or Challenge clearance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Arm` option to the `Precursor Status` dropdown so that Precursor detections actively affect bot score and Challenge clearance when ready for production. • Decouples the Precursor Interstitial from the Precursor mode: set a sitewide default with `Show Interstitial`, then override per-path with `Interstitial Rules` (e.g. enforce an interstitial Challenge on `/checkout` while leaving it off elsewhere). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Sun, 18 Oct 2026 07:55:28 GMT API surface changed: +21 endpoints, −3 endpoints, 45 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/data-security/posture/finding_types/{finding_type_id}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/dlp/validators/proximity_words/{validator_id} • New endpoint DELETE /accounts/{account_id}/dlp/validators/worker/{validator_id} • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/{priority_id}/matches • New endpoint GET /accounts/{account_id}/data-security/posture/asset_schemas • New endpoint GET /accounts/{account_id}/data-security/posture/asset_schemas/{asset_class} • New endpoint GET /accounts/{account_id}/dlp/validators • New endpoint GET /accounts/{account_id}/dlp/validators/proximity_words • New endpoint GET /accounts/{account_id}/dlp/validators/proximity_words/{validator_id} • New endpoint GET /accounts/{account_id}/dlp/validators/worker Breaking changes: • Removed endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds • Removed endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/health • Removed endpoint PATCH /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/opt-out Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Thu, 15 Oct 2026 07:55:18 GMT API surface changed: +96 endpoints, −24 endpoints, 177 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/access/user_populations/{user_population_id}/users/{user_id}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/ai-search/namespaces/{namespace}/instances/{id} • New endpoint DELETE /accounts/{account_id}/ai-search/namespaces/{namespace}/instances/{id}/items/{item_id} • New endpoint DELETE /accounts/{account_id}/cws/basic-auth-credentials/{credential_id} • New endpoint DELETE /accounts/{account_id}/cws/basic-auth-credentials/{credential_id}/secrets/{secret_id} • New endpoint DELETE /accounts/{account_id}/cws/deployments/{deployment_id} • New endpoint DELETE /accounts/{account_id}/cws/domain-acls/{domain_acl_id} • New endpoint DELETE /accounts/{account_id}/cws/policies/{policy_id} • New endpoint DELETE /accounts/{account_id}/cws/policy-sets/{policy_set_id} • New endpoint DELETE /accounts/{account_id}/cws/rego-metadata/{rego_metadata_id} Breaking changes: • Removed endpoint DELETE /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id} • Removed endpoint DELETE /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/items/{item_id} • Removed endpoint GET /accounts/{account_id}/ai-search/namespaces/{name}/instances • Removed endpoint GET /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id} • Removed endpoint GET /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/items • Removed endpoint GET /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/items/{item_id} • Removed endpoint GET /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/items/{item_id}/chunks • Removed endpoint GET /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/items/{item_id}/download • Removed endpoint GET /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/items/{item_id}/logs • Removed endpoint GET /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/jobs • Removed endpoint GET /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/jobs/{job_id} • Removed endpoint GET /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/jobs/{job_id}/logs • Removed endpoint GET /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/stats • Removed endpoint PATCH /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id} • Removed endpoint PATCH /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/items/{item_id} • Removed endpoint PATCH /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/jobs/{job_id} • Removed endpoint POST /accounts/{account_id}/ai-search/namespaces/{name}/instances • Removed endpoint POST /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/chat/completions • Removed endpoint POST /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/items • Removed endpoint POST /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/jobs • Removed endpoint POST /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/purge_cache • Removed endpoint POST /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/search • Removed endpoint PUT /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id} • Removed endpoint PUT /accounts/{account_id}/ai-search/namespaces/{name}/instances/{id}/items • GET /zones/{zone_id}/precursor: param Cloudflare-Version (header) added [required] • PUT /zones/{zone_id}/precursor: param Cloudflare-Version (header) added [required]; request body changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-10-14-emergency-waf-release/ https://developers.cloudflare.com/changelog/post/2026-10-14-emergency-waf-release/ Wed, 14 Oct 2026 00:00:00 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-10-13-byoip-workers-subrequest-context/ https://developers.cloudflare.com/changelog/post/2026-10-13-byoip-workers-subrequest-context/ Tue, 13 Oct 2026 00:00:00 GMT Workers subrequests to BYOIP destinations now preserve `CF-Worker` header and `cf.worker.upstream_zone`, fixing Bot Management and security rule evaluation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Workers subrequests to BYOIP-proxied hostnames now preserve the `CF-Worker` header and `cf.worker.upstream_zone` field, ensuring consistent security rule evaluation across same-zone and cross-zone subrequests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Bot Management fields on destination zones — including bot scores, verified bot status, and JA3/JA4 fingerprints — now reflect the original end-user connection rather than the internal Cloudflare-to-Cloudflare connection for BYOIP subrequests. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Mon, 12 Oct 2026 17:37:55 GMT Agents SDK gains web_fetch and web_search tools; Queues adds EU/US/FedRAMP jurisdictions; API Shield schema learning runs on demand⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `web_fetch` (Agents SDK v0.28.0+, importable from `agents/webfetch/pi`) for reading webpages, PDFs, and supported Office documents with automatic Markdown conversion, exposing fetchWeb(), windowWebFetchPage(), and renderWebFetchPage() for direct fetching without a model or Durable Object; and `web_search` (Agents SDK v0.27.0+, importable from `agents/websearch/pi`) for querying the public web via the Cloudflare Web Search API (powered by ceramic.ai, Exa, and Linkup), exposing createAIWebSearch() and createHTTPWebSearch() for model-free search.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `OpenCodeHarness` (experimental) to the Agents SDK, enabling OpenCode 2.0 to run inside a plain Durable Object with SQLite sessions, Lifecycle jobs, and Workers AI model binding via the `agents/models/opencode` provider; requires `agents@latest @opencode/sdk@2 @opencode/plugin@2`. • Adds jurisdictional restrictions to Cloudflare Queues via the `--jurisdiction` flag (Wrangler) and `jurisdiction` parameter on the `POST /queues` API endpoint; supported values are `eu` (European Union), `us` (United States), and `fedramp` (FedRAMP-Moderate data centers). • Adds `skills/list` discovery and `skill://<name>/<path>` file access to the Cloudflare API MCP server at `https://mcp.cloudflare.com/mcp`, serving Cloudflare skills via the Skills over MCP extension. • Adds unified navigation combining Zero Trust and main Cloudflare dashboard navigation, giving Zero Trust customers access to developer platform, account memberships, and resource tagging from a single sidebar; Zero Trust Network items replaced by experiences under 'Networking', and Resolvers & Proxies moved under Traffic Controls. • Extends the Workers runtime update grace period for pending requests and connections from 30 seconds to up to 20 minutes, covering long-running HTTP requests, streamed AI responses, and live WebSocket sessions. • Raises the Markdown for Agents HTML conversion limit from 2 MiB to 6 MiB (6,291,456 bytes) of decompressed HTML, and switches to an in-process streaming engine at the edge. Breaking changes: • Converted Markdown for Agents responses no longer emit the `x-markdown-tokens` and `x-original-tokens` headers; clients that relied on these values must calculate token counts themselves. • `Content-Length` is removed from Markdown for Agents converted responses (the body is now streamed); clients that depended on this header must handle its absence. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-10-12-manual-schema-learning/ https://developers.cloudflare.com/changelog/post/2026-10-12-manual-schema-learning/ Mon, 12 Oct 2026 00:00:00 GMT API Shield now supports on-demand schema learning runs, skipping the weekly schedule for faster feedback during testing.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds an 'Ad-hoc learn schema' option in Web Assets > Operations > More options menu, letting you trigger an API Shield schema learning run immediately instead of waiting for the weekly schedule.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • The 'Schema learning' dialog shows current learning status and last completed run for the zone, while the 'Learned schema' view shows per-operation results — both updating live so you can review individual operations while the zone-wide run continues. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Sun, 11 Oct 2026 10:00:31 GMT API surface changed: +13 endpoints, −1 endpoint, 32 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/addressing/address_maps/{address_map_id}/ips⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/addressing/address_maps/{address_map_id}/zones • New endpoint DELETE /accounts/{account_id}/workflows/concurrency/{key_id} • New endpoint GET /accounts/{account_id}/addressing/loa_documents • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/skills • New endpoint GET /accounts/{account_id}/workflows/concurrency • New endpoint GET /accounts/{account_id}/workflows/concurrency/{key_id} • New endpoint PATCH /accounts/{account_id}/workflows/concurrency/{key_id} • New endpoint POST /accounts/{account_id}/addressing/address_maps/{address_map_id}/ips • New endpoint POST /accounts/{account_id}/addressing/address_maps/{address_map_id}/zones • New endpoint POST /accounts/{account_id}/browser-extension/config/logs/extension-events/timeseries • New endpoint POST /accounts/{account_id}/d1/database/{database_id}/undelete • New endpoint POST /accounts/{account_id}/workflows/concurrency • GET /accounts/{account_id}/workers/domains: param enabled (query) added; param previews_enabled (query) added • GET /accounts/{account_id}/workers/observability/usage: param tz (query) added Breaking changes: • Removed endpoint GET /accounts/{account_id}/workflows/{workflow_name}/instances/{instance_id}/subscribe • POST /accounts/{account_id}/addressing/address_maps: response schema changed • POST /accounts/{account_id}/addressing/prefixes/{prefix_id}/bgp/prefixes: response schema changed • POST /accounts/{account_id}/addressing/prefixes/{prefix_id}/delegations: response schema changed • PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{member_account_id}: response schema changed • PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/ips/{ip_address}: response schema changed • PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/zones/{member_zone_id}: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Mon, 05 Oct 2026 08:02:29 GMT Breaking changes: • Removed endpoint DELETE /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/{curated_feed_id} • Removed endpoint GET /accounts/{account_id}/browser-rendering/devtools/browser • Removed endpoint GET /accounts/{account_id}/browser-rendering/devtools/browser/{session_id} • Removed endpoint GET /accounts/{account_id}/browser-rendering/devtools/browser/{session_id}/page/{target_id} • Removed endpoint GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs • Removed endpoint GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs/{job_id} • Removed endpoint PATCH /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/{curated_feed_id} • Removed endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/skills/{skill_id}/diagnostic • Removed endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds • Removed endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/bulk • Removed endpoint POST /accounts/{account_id}/hyperdrive/integrationsOperations/{integration}/createDatabaseSignature • Removed endpoint POST /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs • DELETE /accounts/{account_id}/r2/buckets/{bucket_name}/objects: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tags: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills: response schema changed • Deprecated endpoint GET /accounts/{account_id}/data-security/posture/policies/logs (still works) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Mon, 05 Oct 2026 07:55:18 GMT Cloudflare: Adds `--jurisdiction=us` flag to `wrangler d1 create` for creating D1 databases that run and persist data within the United States. • Adds `--jurisdiction` flag (values: `eu`, `us`, `fedramp`) to `wrangler kv namespace create` and `cf kv namespaces create`, and a `jurisdiction` field to `POST /storage/kv/namespaces` REST API, for Workers KV namespace data localization — now generally available. • Adds two new datasets — `Workers Observability — Logs` and Workers Observability — Traces (OTel) — to Custom Dashboards, enabling charts of Worker invocations, log levels, errors, CPU/wall time, span counts, and durations alongside HTTP traffic and security events. • Expands analytics retention to at least 31 days for Free and Pro domains across adaptive datasets (HTTP requests, security events, DNS analytics), with a 30-day single-query window; applies in the dashboard, Custom Dashboards, and the GraphQL Analytics API. • Makes hash_in_range() globally available for HTTP products on all plans, enabling deterministic fractional traffic selection using fields like `cf.random_seed`. • Raises the Custom Dashboards account limit to 100 dashboards. • Consolidates domain analytics into a single tabbed view (Traffic, Performance, Security, Cache, Origin, DNS, Visitors) with a shared time range and filters; account-level analytics moved under `Observability`. Breaking changes: • Zero Trust organizations created on or after October 5, 2026 have `strict_service_token_auth` enabled by default and cannot turn it off — service-token requests will never redirect to login and Allow policies will be ignored for those requests. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Sun, 04 Oct 2026 13:51:20 GMT Cloudflare: New endpoint GET /accounts/{account_id}/argo/count_zones_enabled • New endpoint GET /user/argo/count_zones_enabled Breaking changes: • Removed endpoint DELETE /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/{curated_feed_id} • Removed endpoint GET /accounts/{account_id}/browser-rendering/devtools/browser • Removed endpoint GET /accounts/{account_id}/browser-rendering/devtools/browser/{session_id} • Removed endpoint GET /accounts/{account_id}/browser-rendering/devtools/browser/{session_id}/page/{target_id} • Removed endpoint GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs • Removed endpoint GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs/{job_id} • Removed endpoint PATCH /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/{curated_feed_id} • Removed endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/skills/{skill_id}/diagnostic • Removed endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds • Removed endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/bulk • Removed endpoint POST /accounts/{account_id}/hyperdrive/integrationsOperations/{integration}/createDatabaseSignature • Removed endpoint POST /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs • DELETE /accounts/{account_id}/r2/buckets/{bucket_name}/objects: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tags: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills: response schema changed • Deprecated endpoint GET /accounts/{account_id}/data-security/posture/policies/logs (still works) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Sun, 04 Oct 2026 07:48:50 GMT Cloudflare adds Web Search API beta, strict service token auth, Pi Durable agent harness, 30-day analytics for all plans, and KV namespace jurisdictions GA.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `strict_service_token_auth` field to the `PATCH https://api.cloudflare.com/client/v4/accounts/{account_id}/access/organizations` endpoint to enforce consistent service-token-only authentication behavior in Cloudflare Access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds hash_in_range() function to Cloudflare Rules expressions across all plans and HTTP products, enabling deterministic percentage-based request sampling using `cf.random_seed`. • Introduces Web Search API (beta) at `/{account_id}/ai/websearch/` supporting `query`, `provider` (`ceramic`, `exa`, `linkup`), `limit`, and `options.gateway.id` parameters, routing search through AI Gateway with Zero Data Retention. • Adds `PiHarness` class to the Cloudflare Agents SDK (`agents/harness/pi`) for building durable long-running AI agents using the Pi 1.0 / Pi Durable harness, with support for tools, extensions, and lifecycle persistence in Durable Objects. • Enables strict service token authentication by default for Zero Trust organizations created on or after October 5, 2026, enforcing service-token-only policies and suppressing login redirects and `CF_Authorization` cookie issuance on authenticated requests. Breaking changes: • Zero Trust organizations created on or after October 5, 2026 have `strict_service_token_auth` enabled by default and cannot disable it — requests with service token headers will never be redirected to the login page, Allow policies are ignored, and no `CF_Authorization` cookie is returned. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Sat, 03 Oct 2026 13:00:40 GMT API surface changed: +33 endpoints, −12 endpoints, 71 modified, 1 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/access/user_populations/{user_population_id}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/access/users/{user_id}/passkeys/{authenticator_id} • New endpoint DELETE /accounts/{account_id}/k2/streams/{stream_id} • New endpoint DELETE /zones/{zone_id}/monetization/rules • New endpoint DELETE /zones/{zone_id}/monetization/rules/{rule_id} • New endpoint GET /accounts/{account_id}/access/user_populations • New endpoint GET /accounts/{account_id}/access/user_populations/{user_population_id} • New endpoint GET /accounts/{account_id}/ai-gateway/gateways/{gateway_id}/provider_configs/{id} • New endpoint GET /accounts/{account_id}/basin-catalog/{bucket_name}/credential/status • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/search • New endpoint GET /accounts/{account_id}/k2/streams • New endpoint GET /accounts/{account_id}/k2/streams/{stream_id} • New endpoint GET /accounts/{account_id}/k2/streams/{stream_id}/subscriptions • New endpoint GET /accounts/{account_id}/monetization • New endpoint GET /accounts/{account_id}/r2-catalog/{bucket_name}/credential/status • New endpoint GET /accounts/{account_tag}/analytics/sql • New endpoint GET /accounts/{account_tag}/analytics/sql/introspection • New endpoint GET /zones/{zone_id}/monetization • New endpoint GET /zones/{zone_id}/monetization/rules • New endpoint GET /zones/{zone_id}/monetization/rules/{rule_id} • New endpoint PATCH /accounts/{account_id}/k2/streams/{stream_id} • New endpoint PATCH /accounts/{account_id}/workers/dispatch/namespaces/{dispatch_namespace}/scripts/{script_name}/tags/{tag} • New endpoint PATCH /zones/{zone_id}/monetization/rules/{rule_id} • New endpoint POST /accounts/{account_id}/access/user_populations • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/skills/{skill_id}/run • New endpoint POST /accounts/{account_id}/hyperdrive/integrationsOperations/planetScale/createDatabaseSignature • New endpoint POST /accounts/{account_id}/k2/streams • New endpoint POST /accounts/{account_id}/monetization • New endpoint POST /accounts/{account_id}/r2/buckets/{bucket_name}/jobs • New endpoint POST /accounts/{account_tag}/analytics/sql • New endpoint POST /zones/{zone_id}/monetization • New endpoint PUT /accounts/{account_id}/access/user_populations/{user_population_id} • New endpoint PUT /zones/{zone_id}/monetization/rules • GET /accounts/{account_id}/cloudforce-one/events: param searchBranches (query) added • POST /accounts/{account_id}/browser-rendering/accessibilityTree: param browser (query) added • POST /accounts/{account_id}/browser-rendering/content: param browser (query) added • POST /accounts/{account_id}/browser-rendering/json: param browser (query) added • POST /accounts/{account_id}/browser-rendering/links: param browser (query) added • POST /accounts/{account_id}/browser-rendering/markdown: param browser (query) added • POST /accounts/{account_id}/browser-rendering/pdf: param browser (query) added • POST /accounts/{account_id}/browser-rendering/scrape: param browser (query) added • POST /accounts/{account_id}/browser-rendering/screenshot: param browser (query) added • POST /accounts/{account_id}/browser-rendering/snapshot: param browser (query) added Breaking changes: • Removed endpoint DELETE /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/{curated_feed_id} • Removed endpoint GET /accounts/{account_id}/browser-rendering/devtools/browser • Removed endpoint GET /accounts/{account_id}/browser-rendering/devtools/browser/{session_id} • Removed endpoint GET /accounts/{account_id}/browser-rendering/devtools/browser/{session_id}/page/{target_id} • Removed endpoint GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs • Removed endpoint GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs/{job_id} • Removed endpoint PATCH /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/{curated_feed_id} • Removed endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/skills/{skill_id}/diagnostic • Removed endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds • Removed endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/bulk • Removed endpoint POST /accounts/{account_id}/hyperdrive/integrationsOperations/{integration}/createDatabaseSignature • Removed endpoint POST /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs • DELETE /accounts/{account_id}/r2/buckets/{bucket_name}/objects: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tags: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills: response schema changed • Deprecated endpoint GET /accounts/{account_id}/data-security/posture/policies/logs (still works) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-09-30-waf-release/ https://developers.cloudflare.com/changelog/post/2026-09-30-waf-release/ Wed, 30 Sep 2026 00:00:00 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Tue, 29 Sep 2026 14:29:02 GMT API surface changed: +30 endpoints, 27 modified, 15 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/access/identity_providers/{identity_provider_id}/scim/groups/{group_id}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/access/identity_providers/{identity_provider_id}/scim/users/{user_id} • New endpoint DELETE /accounts/{account_id}/dns_settings/nameserver_sets/{nameserver_set_id} • New endpoint GET /accounts/{account_id}/access/identity_providers/{identity_provider_id}/scim/groups/{group_id} • New endpoint GET /accounts/{account_id}/access/identity_providers/{identity_provider_id}/scim/users/{user_id} • New endpoint GET /accounts/{account_id}/basin-catalog • New endpoint GET /accounts/{account_id}/basin-catalog/{bucket_name} • New endpoint GET /accounts/{account_id}/basin-catalog/{bucket_name}/maintenance-configs • New endpoint GET /accounts/{account_id}/basin-catalog/{bucket_name}/namespaces • New endpoint GET /accounts/{account_id}/basin-catalog/{bucket_name}/namespaces/{namespace}/tables • New endpoint GET /accounts/{account_id}/basin-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name} • New endpoint GET /accounts/{account_id}/basin-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-configs • New endpoint GET /accounts/{account_id}/basin-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-runs • New endpoint GET /accounts/{account_id}/dns_settings/nameserver_sets • New endpoint GET /accounts/{account_id}/dns_settings/nameserver_sets/{nameserver_set_id} • New endpoint GET /accounts/{account_id}/security-center/partners/{partner}/settings • New endpoint GET /accounts/{account_id}/security-center/partners/{partner}/shadow-zones • New endpoint GET /accounts/{account_id}/security-center/partners/{partner}/shadow-zones/{domain}/hosts • New endpoint GET /zones/{zone_id}/security-center/partners/{partner}/shadow-hosts • New endpoint POST /accounts/{account_id}/basin-catalog/{bucket_name}/credential • New endpoint POST /accounts/{account_id}/basin-catalog/{bucket_name}/delete • New endpoint POST /accounts/{account_id}/basin-catalog/{bucket_name}/disable • New endpoint POST /accounts/{account_id}/basin-catalog/{bucket_name}/enable • New endpoint POST /accounts/{account_id}/basin-catalog/{bucket_name}/maintenance-configs • New endpoint POST /accounts/{account_id}/basin-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-configs • New endpoint POST /accounts/{account_id}/basin-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-configs/{configuration_type}/queue • New endpoint POST /accounts/{account_id}/dns_settings/nameserver_sets • New endpoint POST /accounts/{account_id}/security-center/partners/{partner}/settings • New endpoint POST /zones/{zone_id}/environments/{environment_id}/invalidate_cache • New endpoint POST /zones/{zone_id}/invalidate_cache Breaking changes: • DELETE /accounts/{account_id}/workers/dispatch/namespaces/{dispatch_namespace}/scripts: param tags (query) now required • Deprecated endpoint GET /accounts/{account_id}/r2-catalog (still works) • Deprecated endpoint GET /accounts/{account_id}/r2-catalog/{bucket_name} (still works) • Deprecated endpoint GET /accounts/{account_id}/r2-catalog/{bucket_name}/maintenance-configs (still works) • Deprecated endpoint GET /accounts/{account_id}/r2-catalog/{bucket_name}/namespaces (still works) • Deprecated endpoint GET /accounts/{account_id}/r2-catalog/{bucket_name}/namespaces/{namespace}/tables (still works) • Deprecated endpoint GET /accounts/{account_id}/r2-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name} (still works) • Deprecated endpoint GET /accounts/{account_id}/r2-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-configs (still works) • Deprecated endpoint GET /accounts/{account_id}/r2-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-runs (still works) • Deprecated endpoint POST /accounts/{account_id}/r2-catalog/{bucket_name}/credential (still works) • Deprecated endpoint POST /accounts/{account_id}/r2-catalog/{bucket_name}/delete (still works) • Deprecated endpoint POST /accounts/{account_id}/r2-catalog/{bucket_name}/disable (still works) • Deprecated endpoint POST /accounts/{account_id}/r2-catalog/{bucket_name}/enable (still works) • Deprecated endpoint POST /accounts/{account_id}/r2-catalog/{bucket_name}/maintenance-configs (still works) • Deprecated endpoint POST /accounts/{account_id}/r2-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-configs (still works) • Deprecated endpoint POST /accounts/{account_id}/r2-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-configs/{configuration_type}/queue (still works) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Sat, 26 Sep 2026 12:51:56 GMT Cloudflare: New endpoint DELETE /accounts/{account_id}/addressing/address_maps/{address_map_id}/zones/{member_zone_id}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/zones/{member_zone_id} Breaking changes: • Removed endpoint DELETE /accounts/{accountId}/v1/images/{imageId} • Removed endpoint DELETE /accounts/{account_identifier}/custom_pages/assets/{asset_name} • Removed endpoint DELETE /accounts/{account_id}/addressing/address_maps/{address_map_id}/zones/{zone_id} • Removed endpoint DELETE /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/rules • Removed endpoint DELETE /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/settings • Removed endpoint DELETE /zones/{zone_identifier}/custom_pages/assets/{asset_name} • Removed endpoint GET /accounts/{accountId}/v1/images • Removed endpoint GET /accounts/{accountId}/v1/images/{imageId} • Removed endpoint GET /accounts/{accountId}/v1/images/{imageId}/blob • Removed endpoint GET /accounts/{accountId}/v2/images • Removed endpoint GET /accounts/{accountId}/zones/{zoneId}/v1/images/flows • Removed endpoint GET /accounts/{account_identifier}/custom_pages • Removed endpoint GET /accounts/{account_identifier}/custom_pages/assets • Removed endpoint GET /accounts/{account_identifier}/custom_pages/assets/{asset_name} • Removed endpoint GET /accounts/{account_identifier}/custom_pages/{identifier} • Removed endpoint GET /accounts/{account_id}/security-center/insights/count • Removed endpoint GET /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/rules • Removed endpoint GET /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/settings • Removed endpoint GET /zones/{zone_identifier}/custom_pages • Removed endpoint GET /zones/{zone_identifier}/custom_pages/assets • Removed endpoint GET /zones/{zone_identifier}/custom_pages/assets/{asset_name} • Removed endpoint GET /zones/{zone_identifier}/custom_pages/{identifier} • Removed endpoint PATCH /accounts/{accountId}/v1/images/{imageId} • Removed endpoint PATCH /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/settings • Removed endpoint POST /accounts/{accountId}/v1/images • Removed endpoint POST /accounts/{accountId}/v2/images/direct_upload • Removed endpoint POST /accounts/{account_identifier}/custom_pages/assets • Removed endpoint POST /accounts/{account_identifier}/custom_pages/preview_tokens • Removed endpoint POST /zones/{zone_identifier}/custom_pages/assets • Removed endpoint POST /zones/{zone_identifier}/custom_pages/preview_tokens • Removed endpoint PUT /accounts/{accountId}/v1/images/{imageId} • Removed endpoint PUT /accounts/{accountId}/zones/{zoneId}/v1/images/flows • Removed endpoint PUT /accounts/{account_identifier}/custom_pages/assets/{asset_name} • Removed endpoint PUT /accounts/{account_identifier}/custom_pages/{identifier} • Removed endpoint PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/zones/{zone_id} • Removed endpoint PUT /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/rules • Removed endpoint PUT /zones/{zone_identifier}/custom_pages/assets/{asset_name} • Removed endpoint PUT /zones/{zone_identifier}/custom_pages/{identifier} • DELETE /zones/{zone_id}/firewall/waf/overrides/{overrides_id}: response schema changed • DELETE /zones/{zone_id}/rate_limits/{rate_limit_id}: response schema changed • GET /zones/{zone_id}/firewall/waf/overrides: response schema changed • GET /zones/{zone_id}/firewall/waf/overrides/{overrides_id}: response schema changed • GET /zones/{zone_id}/rate_limits: response schema changed • GET /zones/{zone_id}/rate_limits/{rate_limit_id}: response schema changed • GET /zones/{zone_id}/spectrum/analytics/aggregate/current: response schema changed • GET /zones/{zone_id}/spectrum/analytics/events/bytime: response schema changed • GET /zones/{zone_id}/spectrum/analytics/events/summary: response schema changed • POST /zones/{zone_id}/firewall/waf/overrides: response schema changed • POST /zones/{zone_id}/rate_limits: response schema changed • PUT /zones/{zone_id}/firewall/waf/overrides/{overrides_id}: response schema changed • PUT /zones/{zone_id}/rate_limits/{rate_limit_id}: response schema changed • Deprecated endpoint GET /accounts/{account_id}/containers/applications/{application_id}/instances (still works) • Deprecated endpoint GET /accounts/{account_id}/dlp/payload_log (still works) • Deprecated endpoint GET /accounts/{account_id}/images/v1/variants/{variant_id}/flat (still works) • Deprecated endpoint POST /accounts/{account_id}/devices/physical-devices/{device_id}/revoke (still works) • Deprecated endpoint POST /accounts/{account_id}/devices/registrations/revoke (still works) • Deprecated endpoint POST /accounts/{account_id}/devices/registrations/unrevoke (still works) • Deprecated endpoint POST /accounts/{account_id}/email-security/investigate/{investigate_id}/reclassify (still works) • Deprecated endpoint POST /accounts/{account_id}/queues/{queue_id}/messages/preview (still works) • Deprecated endpoint POST /accounts/{account_id}/queues/{queue_id}/messages/preview/ack (still works) • Deprecated endpoint PUT /accounts/{account_id}/devices/settings (still works) • Deprecated endpoint PUT /accounts/{account_id}/dlp/payload_log (still works) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Sat, 26 Sep 2026 07:48:06 GMT Cloudflare adds Browser Run queue subscriptions, Workers OpenTelemetry span APIs, Gateway traffic-destination policies, and MCP portals GA⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `wrangler queues subscription create <QUEUE_NAME> --source browserRun --events crawl.started,crawl.updated,crawl.finished` to subscribe to Browser Run crawl lifecycle events via Cloudflare Queues, enabling event-driven downstream processing without polling.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `scope` field to the Email Sending suppressions API (`POST /client/v4/accounts/$ACCOUNT_ID/email/sending/suppressions`) with values `account` and `sending_domain`, enabling per-domain suppression granularity; `scope_type=sending_domain&scope_value=<domain>` filters list results. • Adds tracing.startSpan(name), tracing.getActiveSpan(), span.recordException(exception), and span.setAttributes(attributes) to the Workers custom spans API, expanding OpenTelemetry span instrumentation support. • Adds setAttribute() and setAttributes() returning the span object so calls can be chained in Workers tracing. • Makes MCP server portals generally available, adding Gateway routing for HTTP logging and DLP scanning, Code Mode policies, static OAuth client credentials, session management, service token authentication, and Logpush support for SIEM export. • Adds Managed Ruleset support for accounts using Unified Routing mode in Cloudflare Advanced Network Firewall. • Adds release and gradual deployment annotations to Workers Metrics charts, with hover details showing previous/new versions, rollout duration, and per-step traffic percentage. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Fri, 25 Sep 2026 13:19:26 GMT API surface changed: +89 endpoints, −36 endpoints, 196 modified, 8 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/custom_pages/assets/{asset_name}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/devices/policy/exclude • New endpoint DELETE /accounts/{account_id}/devices/policy/fallback_domains • New endpoint DELETE /accounts/{account_id}/devices/policy/{policy_id}/exclude • New endpoint DELETE /accounts/{account_id}/devices/policy/{policy_id}/fallback_domains • New endpoint DELETE /accounts/{account_id}/workers/observability/issues/groups/{groupId} • New endpoint DELETE /accounts/{account_id}/workers/observability/issues/groups/{groupId}/members/{issueId} • New endpoint DELETE /accounts/{account_id}/workers/workers/{worker_id}/previews/{preview_id} • New endpoint DELETE /accounts/{account_id}/workers/workers/{worker_id}/previews/{preview_id}/deployments/{deployment_id} • New endpoint DELETE /zones/{zone_id}/custom_pages/assets/{asset_name} • New endpoint DELETE /zones/{zone_id}/observability/tracing/rules • New endpoint DELETE /zones/{zone_id}/observability/tracing/settings • New endpoint DELETE /zones/{zone_id}/pay-per-use/operators/{operator_id}/price • New endpoint GET /accounts/{account_id}/browser-rendering/recording/{session_id} • New endpoint GET /accounts/{account_id}/browser-rendering/recording/{session_id}/network • New endpoint GET /accounts/{account_id}/builds/workers/{script_tag}/previews • New endpoint GET /accounts/{account_id}/builds/workers/{script_tag}/previews/{preview_id} • New endpoint GET /accounts/{account_id}/builds/workers/{script_tag}/previews/{preview_id}/builds • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/categories • New endpoint GET /accounts/{account_id}/containers/applications/{application_id}/instances-v2 • New endpoint GET /accounts/{account_id}/custom_pages • New endpoint GET /accounts/{account_id}/custom_pages/assets • New endpoint GET /accounts/{account_id}/custom_pages/assets/{asset_name} • New endpoint GET /accounts/{account_id}/custom_pages/{identifier} • New endpoint GET /accounts/{account_id}/managed-defense/vulnerability-discovery/repos • New endpoint GET /accounts/{account_id}/managed-defense/vulnerability-discovery/repos/{repo_id} • New endpoint GET /accounts/{account_id}/managed-defense/vulnerability-discovery/repos/{repo_id}/scans/{scan_id}/report • New endpoint GET /accounts/{account_id}/managed-defense/vulnerability-discovery/scans • New endpoint GET /accounts/{account_id}/managed-defense/vulnerability-discovery/scans/{scan_id} • New endpoint GET /accounts/{account_id}/managed-defense/vulnerability-discovery/scans/{scan_id}/report • New endpoint GET /accounts/{account_id}/pay-per-use/enabled-domains • New endpoint GET /accounts/{account_id}/pay-per-use/operator/configuration • New endpoint GET /accounts/{account_id}/pay-per-use/proposals • New endpoint GET /accounts/{account_id}/pay-per-use/usage-stats • New endpoint GET /accounts/{account_id}/registrar/registrations/{domain_name}/transfer-in-status • New endpoint GET /accounts/{account_id}/security-center/insights/partner-count • New endpoint GET /accounts/{account_id}/workers/workers/{worker_id}/previews • New endpoint GET /accounts/{account_id}/workers/workers/{worker_id}/previews/{preview_id} • New endpoint GET /accounts/{account_id}/workers/workers/{worker_id}/previews/{preview_id}/deployments • New endpoint GET /accounts/{account_id}/workers/workers/{worker_id}/previews/{preview_id}/deployments/{deployment_id} • New endpoint GET /zones/{zone_id}/custom_pages • New endpoint GET /zones/{zone_id}/custom_pages/assets • New endpoint GET /zones/{zone_id}/custom_pages/assets/{asset_name} • New endpoint GET /zones/{zone_id}/custom_pages/{identifier} • New endpoint GET /zones/{zone_id}/images/v1/flows • New endpoint GET /zones/{zone_id}/observability/tracing/rules • New endpoint GET /zones/{zone_id}/observability/tracing/settings • New endpoint GET /zones/{zone_id}/pay-per-use/can_be_enabled • New endpoint GET /zones/{zone_id}/pay-per-use/configuration • New endpoint GET /zones/{zone_id}/pay-per-use/operators • New endpoint GET /zones/{zone_id}/pay-per-use/usage-stats • New endpoint GET /zones/{zone_id}/security-center/insights/partner-count • New endpoint PATCH /accounts/{account_id}/builds/workers/{script_tag}/previews/{preview_id} • New endpoint PATCH /accounts/{account_id}/devices/physical-devices/{device_id} • New endpoint PATCH /accounts/{account_id}/pay-per-use/operator/configuration • New endpoint PATCH /accounts/{account_id}/pay-per-use/zones_can_be_enabled • New endpoint PATCH /accounts/{account_id}/workers/workers/{worker_id}/previews/{preview_id} • New endpoint PATCH /accounts/{account_id}/workers/workers/{worker_id}/previews/{preview_id}/deployments/latest • New endpoint PATCH /zones/{zone_id}/observability/tracing/settings • New endpoint PATCH /zones/{zone_id}/pay-per-use/configuration • New endpoint POST /accounts/{account_id}/ai/websearch • New endpoint POST /accounts/{account_id}/builds/workers/{script_tag}/migrate_to_previews • New endpoint POST /accounts/{account_id}/builds/workers/{script_tag}/previews/{preview_id}/builds • New endpoint POST /accounts/{account_id}/custom_pages/assets • New endpoint POST /accounts/{account_id}/custom_pages/preview_tokens • New endpoint POST /accounts/{account_id}/devices/override_codes • New endpoint POST /accounts/{account_id}/managed-defense/vulnerability-discovery/repos • New endpoint POST /accounts/{account_id}/managed-defense/vulnerability-discovery/scans • New endpoint POST /accounts/{account_id}/pay-per-use/proposals • New endpoint POST /accounts/{account_id}/pay-per-use/usage-reports • New endpoint POST /accounts/{account_id}/registrar/domain-transfer-check • New endpoint POST /accounts/{account_id}/registrar/registrations/{domain_name}/transfer-in • New endpoint POST /accounts/{account_id}/workers/durable_objects/namespaces/{id}/query/v2 • New endpoint POST /accounts/{account_id}/workers/observability/issues/groups • New endpoint POST /accounts/{account_id}/workers/observability/issues/groups/{groupId}/members • New endpoint POST /accounts/{account_id}/workers/workers/{worker_id}/previews • New endpoint POST /accounts/{account_id}/workers/workers/{worker_id}/previews/{preview_id}/deployments • New endpoint POST /zones/{zone_id}/custom_pages/assets • New endpoint POST /zones/{zone_id}/custom_pages/preview_tokens • New endpoint POST /zones/{zone_id}/pay-per-use/operators/{operator_id}/price • New endpoint PUT /accounts/{account_id}/custom_pages/assets/{asset_name} • New endpoint PUT /accounts/{account_id}/custom_pages/{identifier} • New endpoint PUT /accounts/{account_id}/pay-per-use/operator/configuration • New endpoint PUT /accounts/{account_id}/workers/workers/{worker_id}/previews/{preview_id} • New endpoint PUT /organizations/{organization_id}/invites/{member_code} • New endpoint PUT /zones/{zone_id}/custom_pages/assets/{asset_name} • New endpoint PUT /zones/{zone_id}/custom_pages/{identifier} • New endpoint PUT /zones/{zone_id}/images/v1/flows • New endpoint PUT /zones/{zone_id}/observability/tracing/rules • DELETE /accounts/{account_id}/workers/workers/{worker_id}: param force (query) added • GET /accounts/{account_id}/ai-search/instances: param hostname (query) added • GET /accounts/{account_id}/ai-search/namespaces/{name}/instances: param hostname (query) added • GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles: param tag_category_id (query) added • GET /accounts/{account_id}/containers/applications: param page_token (query) added; param per_page (query) added • GET /accounts/{account_id}/devices/policies: param profile_type (query) added • GET /accounts/{account_id}/gateway/lists/{list_id}/items: param page (query) added; param per_page (query) added • GET /accounts/{account_id}/gateway/pacfiles: param page (query) added; param per_page (query) added • GET /accounts/{account_id}/workers/observability/issues: param type (query) added • GET /analytics/sql/introspection: param include_lex (query) added; param include_wae (query) added • PATCH /accounts/{account_id}/builds/workers/{script_tag}: param patch_existing_previews (query) added Breaking changes: • Removed endpoint DELETE /accounts/{accountId}/v1/images/{imageId} • Removed endpoint DELETE /accounts/{account_identifier}/custom_pages/assets/{asset_name} • Removed endpoint DELETE /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/rules • Removed endpoint DELETE /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/settings • Removed endpoint DELETE /zones/{zone_identifier}/custom_pages/assets/{asset_name} • Removed endpoint GET /accounts/{accountId}/v1/images • Removed endpoint GET /accounts/{accountId}/v1/images/{imageId} • Removed endpoint GET /accounts/{accountId}/v1/images/{imageId}/blob • Removed endpoint GET /accounts/{accountId}/v2/images • Removed endpoint GET /accounts/{accountId}/zones/{zoneId}/v1/images/flows • Removed endpoint GET /accounts/{account_identifier}/custom_pages • Removed endpoint GET /accounts/{account_identifier}/custom_pages/assets • Removed endpoint GET /accounts/{account_identifier}/custom_pages/assets/{asset_name} • Removed endpoint GET /accounts/{account_identifier}/custom_pages/{identifier} • Removed endpoint GET /accounts/{account_id}/security-center/insights/count • Removed endpoint GET /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/rules • Removed endpoint GET /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/settings • Removed endpoint GET /zones/{zone_identifier}/custom_pages • Removed endpoint GET /zones/{zone_identifier}/custom_pages/assets • Removed endpoint GET /zones/{zone_identifier}/custom_pages/assets/{asset_name} • Removed endpoint GET /zones/{zone_identifier}/custom_pages/{identifier} • Removed endpoint PATCH /accounts/{accountId}/v1/images/{imageId} • Removed endpoint PATCH /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/settings • Removed endpoint POST /accounts/{accountId}/v1/images • Removed endpoint POST /accounts/{accountId}/v2/images/direct_upload • Removed endpoint POST /accounts/{account_identifier}/custom_pages/assets • Removed endpoint POST /accounts/{account_identifier}/custom_pages/preview_tokens • Removed endpoint POST /zones/{zone_identifier}/custom_pages/assets • Removed endpoint POST /zones/{zone_identifier}/custom_pages/preview_tokens • Removed endpoint PUT /accounts/{accountId}/v1/images/{imageId} • Removed endpoint PUT /accounts/{accountId}/zones/{zoneId}/v1/images/flows • Removed endpoint PUT /accounts/{account_identifier}/custom_pages/assets/{asset_name} • Removed endpoint PUT /accounts/{account_identifier}/custom_pages/{identifier} • Removed endpoint PUT /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/rules • Removed endpoint PUT /zones/{zone_identifier}/custom_pages/assets/{asset_name} • Removed endpoint PUT /zones/{zone_identifier}/custom_pages/{identifier} • DELETE /zones/{zone_id}/firewall/waf/overrides/{overrides_id}: response schema changed • DELETE /zones/{zone_id}/rate_limits/{rate_limit_id}: response schema changed • GET /zones/{zone_id}/firewall/waf/overrides: response schema changed • GET /zones/{zone_id}/firewall/waf/overrides/{overrides_id}: response schema changed • GET /zones/{zone_id}/rate_limits: response schema changed • GET /zones/{zone_id}/rate_limits/{rate_limit_id}: response schema changed • GET /zones/{zone_id}/spectrum/analytics/aggregate/current: response schema changed • GET /zones/{zone_id}/spectrum/analytics/events/bytime: response schema changed • GET /zones/{zone_id}/spectrum/analytics/events/summary: response schema changed • POST /zones/{zone_id}/firewall/waf/overrides: response schema changed • POST /zones/{zone_id}/rate_limits: response schema changed • PUT /zones/{zone_id}/firewall/waf/overrides/{overrides_id}: response schema changed • PUT /zones/{zone_id}/rate_limits/{rate_limit_id}: response schema changed • Deprecated endpoint GET /accounts/{account_id}/containers/applications/{application_id}/instances (still works) • Deprecated endpoint GET /accounts/{account_id}/images/v1/variants/{variant_id}/flat (still works) • Deprecated endpoint POST /accounts/{account_id}/devices/physical-devices/{device_id}/revoke (still works) • Deprecated endpoint POST /accounts/{account_id}/devices/registrations/revoke (still works) • Deprecated endpoint POST /accounts/{account_id}/devices/registrations/unrevoke (still works) • Deprecated endpoint POST /accounts/{account_id}/queues/{queue_id}/messages/preview (still works) • Deprecated endpoint POST /accounts/{account_id}/queues/{queue_id}/messages/preview/ack (still works) • Deprecated endpoint PUT /accounts/{account_id}/devices/settings (still works) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Fri, 25 Sep 2026 07:51:06 GMT Cloudflare: Adds `Logpush` support for MCP server portals, enabling export of portal activity to external storage or a SIEM system. • Adds `Static OAuth client credentials` support to MCP server portals for providers that do not support Dynamic Client Registration. • Adds `Service token authentication` to MCP server portals for autonomous agents and machine-to-machine access. • Adds `Code Mode policies` to MCP server portals to control how portals reduce tool definitions and token use. • MCP server portals are now generally available to all Cloudflare customers, providing a single endpoint for approved Model Context Protocol (MCP) servers with Access logging of tool, prompt, and resource activity. • Adds a product-level `Metrics` page to the Cloudflare dashboard for R2, showing bandwidth usage split by object upload and download across all buckets or per bucket, also exposed via the `GraphQL Analytics API`. • Adds Worker Previews, giving each pull request an isolated, production-like environment with its own code, configuration, URL, logs, errors, metrics, and traces. • Durable Object name search in the Cloudflare dashboard now accepts up to 128 characters, up from 20, applying to the `Metrics` tab object filter and `Data Studio` object search. • 1.1.1.1 adds RFC 8509 root key trust anchor sentinel support, allowing queries to sentinel names (e.g., `root-key-sentinel-is-ta-38696.dnstest.dev`) to verify whether the resolver trusts a DNSSEC root key such as KSK-2024 (key tag 38696). • Adds `Gateway routing` to MCP server portals for HTTP logging and data loss prevention (DLP) scanning. • Adds `Session management` to MCP server portals for reconnecting servers and changing authorizations from the portal. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Thu, 24 Sep 2026 13:07:12 GMT Cloudflare: Introduces Worker Previews, letting each pull request run in an isolated environment with its own code, URL, bindings, logs, metrics, and traces, configured via the `previews` block in the Wrangler configuration file and deployed with `npx wrangler preview` (requires Wrangler 4.135.0 or later). • Introduces account-level transformation analytics in Images, showing request traffic split by URL-based vs. Images binding transformations, top zones, configurations, origin hosts, and Worker scripts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Thu, 24 Sep 2026 07:51:41 GMT Cloudflare adds Traffic Destination selector, Worker Previews, private MCP support, browser binding session APIs, and more⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `net.offramp.type` API field as the `Traffic Destination` selector in Gateway HTTP and Network policies, with values `internet`, `cloudflare_wan`, `cloudflare_tunnel`, `device_client`, and `mesh` to target specific off-ramp methods.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds acquire() and launch() methods to browser bindings with an `outboundByHost` option to route per-hostname requests through another Worker, plus connectSession(sessionId) and a nested `devtools` binding for typed DevTools and session-management operations. • Adds guided onboarding for Cloudflare Mesh participants from the dashboard, with deployment options for Linux, Kubernetes, Docker Compose, and Docker CLI, plus a unified node-and-device management table. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-09-22-waf-release/ https://developers.cloudflare.com/changelog/post/2026-09-22-waf-release/ Tue, 22 Sep 2026 00:00:00 GMT Cloudflare WAF adds four new managed rules blocking SSRF non-standard IP notations, jar loopback payloads, and Jinja SSTI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds managed rule `...5f21b651` to block SSRF attempts using cloud and link-local non-standard IP notation (action changed from Log to Block).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds managed rule `...0f0313d6` to block SSRF attempts using jar HTTP loopback payloads (action changed from Log to Block). • Adds managed rule `...75cd912a` to block SSRF attempts using local non-standard IP notation (action changed from Log to Block). • Adds managed rule `...a1ba83f6` to block Server-Side Template Injection targeting Jinja Dangerous Globals chains (action changed from Log to Block). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Mon, 21 Sep 2026 14:34:34 GMT API surface changed: +14 endpoints, 22 modified, 13 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/workers/observability/issues/automations/{automationId}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/rules • New endpoint DELETE /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/settings • New endpoint GET /accounts/{account_id}/billable/usage/billable-metrics • New endpoint GET /accounts/{account_id}/workers/observability/issues • New endpoint GET /accounts/{account_id}/workers/observability/issues/automations • New endpoint GET /accounts/{account_id}/workers/observability/issues/automations/{automationId} • New endpoint GET /accounts/{account_id}/workers/observability/issues/summary • New endpoint GET /accounts/{account_id}/workers/observability/issues/{issueId} • New endpoint GET /accounts/{account_id}/workers/observability/issues/{issueId}/occurrences • New endpoint PATCH /accounts/{account_id}/workers/observability/issues/{issueId} • New endpoint POST /accounts/{account_id}/workers/observability/issues/automations • New endpoint POST /accounts/{account_id}/workers/observability/issues/{issueId}/notification-runs • New endpoint PUT /accounts/{account_id}/workers/observability/issues/automations/{automationId} • GET /accounts/{account_id}/workers/scripts/{script_name}/deployments: param page (query) added; param per_page (query) added; param since (query) added; param until (query) added • GET /analytics/sql/introspection: param include_custom_attributes (query) added Breaking changes: • Deprecated endpoint DELETE /accounts/{account_id}/ai-search/instances/{id} (still works) • Deprecated endpoint GET /accounts/{account_id}/ai-search/instances (still works) • Deprecated endpoint GET /accounts/{account_id}/ai-search/instances/{id} (still works) • Deprecated endpoint GET /accounts/{account_id}/ai-search/instances/{id}/jobs (still works) • Deprecated endpoint GET /accounts/{account_id}/ai-search/instances/{id}/jobs/{job_id} (still works) • Deprecated endpoint GET /accounts/{account_id}/ai-search/instances/{id}/jobs/{job_id}/logs (still works) • Deprecated endpoint GET /accounts/{account_id}/ai-search/instances/{id}/stats (still works) • Deprecated endpoint PATCH /accounts/{account_id}/ai-search/instances/{id}/jobs/{job_id} (still works) • Deprecated endpoint POST /accounts/{account_id}/ai-search/instances (still works) • Deprecated endpoint POST /accounts/{account_id}/ai-search/instances/{id}/chat/completions (still works) • Deprecated endpoint POST /accounts/{account_id}/ai-search/instances/{id}/jobs (still works) • Deprecated endpoint POST /accounts/{account_id}/ai-search/instances/{id}/search (still works) • Deprecated endpoint PUT /accounts/{account_id}/ai-search/instances/{id} (still works) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Fri, 18 Sep 2026 07:38:29 GMT API surface changed: +61 endpoints, 112 modified, 10 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/cloudforce-one/events/datasets/{dataset_id}/events⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/cloudforce-one/events/event-categories/by-id/{category_id} • New endpoint DELETE /accounts/{account_id}/cloudforce-one/events/tag-categories/{category_uuid} • New endpoint DELETE /accounts/{account_id}/cloudforce-one/v2/credential-monitor/domains/{id} • New endpoint DELETE /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/interests/{interest_id} • New endpoint DELETE /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/{priority_id} • New endpoint DELETE /accounts/{account_id}/r2/buckets/{bucket_name}/lock • New endpoint GET /accounts/{account_id}/cloudforce-one/events/by-id/{event_id}/relationships • New endpoint GET /accounts/{account_id}/cloudforce-one/events/datasets/{dataset_id}/events/{event_id}/raw • New endpoint GET /accounts/{account_id}/cloudforce-one/events/event-categories/by-id/{category_id} • New endpoint GET /accounts/{account_id}/cloudforce-one/events/tag-categories/{category_uuid} • New endpoint GET /accounts/{account_id}/cloudforce-one/events/tags/categories/actors • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/credential-monitor/domains • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/credential-monitor/matches • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/priority-intelligence • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/constants • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/interests • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/interests/backtests/{backtest_id} • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/interests/evaluations/{evaluation_id} • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/{priority_id} • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/legal-response/access-check • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/{project_type} • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/constants • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/metadata • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/quota • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/types • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/user/me • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/{request_id} • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/{request_id}/assets/list • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/{request_id}/assets/{asset_id}/download • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/{request_id}/messages • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/{request_id}/messages/{message_id} • New endpoint GET /accounts/{account_id}/security-center/insights/count • New endpoint GET /accounts/{account_id}/workers/workers/{worker_id}/versions/latest • New endpoint GET /analytics/sql • New endpoint GET /analytics/sql/introspection • New endpoint PATCH /accounts/{account_id}/cloudforce-one/events/event-categories/by-id/{category_id} • New endpoint PATCH /accounts/{account_id}/cloudforce-one/events/tag-categories/{category_uuid} • New endpoint PATCH /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/interests/{interest_id} • New endpoint POST /accounts/{account_id}/browser-extension/config/logs/extension-events/search • New endpoint POST /accounts/{account_id}/cloudforce-one/events • New endpoint POST /accounts/{account_id}/cloudforce-one/events/event-categories/by-id/{category_id} • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/brand-protection/domain/matches/bulk-dismiss • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/brand-protection/domain/trial • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/brand-protection/queries/{query_id}/matches/{domain_id}/dismiss • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/brand-protection/queries/{query_id}/matches/{domain_id}/undismiss • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/credential-monitor/domains • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/priority-intelligence • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/interests • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/interests/backtests • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/interests/evaluations • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/quota • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/requests/{project_type} • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/{request_id}/assets/upload • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/{request_id}/messages/new • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/skills/{skill_id}/diagnostic • New endpoint POST /analytics/sql • New endpoint PUT /accounts/{account_id}/cloudforce-one/v2/priority-intelligence/{priority_id} • New endpoint PUT /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/{request_id} • New endpoint PUT /accounts/{account_id}/cloudforce-one/v2/requests/{project_type}/{request_id}/messages/{message_id} • New endpoint PUT /accounts/{account_id}/scim/v2/Groups/{group_id} • GET /accounts/{account_id}/intel/attack-surface-report/issues: param source (query) added • GET /accounts/{account_id}/intel/attack-surface-report/issues/class: param source (query) added • GET /accounts/{account_id}/intel/attack-surface-report/issues/severity: param source (query) added • GET /accounts/{account_id}/intel/attack-surface-report/issues/type: param source (query) added • GET /accounts/{account_id}/realtime/kit/{app_id}/sessions/{session_id}/participants: param per_page (query) added • GET /accounts/{account_id}/security-center/insights: param source (query) added • GET /accounts/{account_id}/security-center/insights/class: param source (query) added • GET /accounts/{account_id}/security-center/insights/severity: param source (query) added • GET /accounts/{account_id}/security-center/insights/type: param source (query) added • GET /zones/{zone_id}/security-center/insights: param source (query) added • GET /zones/{zone_id}/security-center/insights/class: param source (query) added • GET /zones/{zone_id}/security-center/insights/severity: param source (query) added • GET /zones/{zone_id}/security-center/insights/type: param source (query) added • POST /accounts: param Idempotency-Key (header) added • POST /accounts/{account_id}/stream/live_inputs: param Idempotency-Key (header) added Breaking changes: • DELETE /accounts/{account_id}/event_notifications/r2/{bucket_name}/configuration/queues/{queue_id}: param cf-r2-jurisdiction (header) removed • DELETE /accounts/{account_id}/r2/buckets/{bucket_name}: param cf-r2-jurisdiction (header) removed • DELETE /accounts/{account_id}/r2/buckets/{bucket_name}/cors: param cf-r2-jurisdiction (header) removed • DELETE /accounts/{account_id}/r2/buckets/{bucket_name}/domains/custom/{domain}: param cf-r2-jurisdiction (header) removed • DELETE /accounts/{account_id}/r2/buckets/{bucket_name}/objects: param cf-r2-jurisdiction (header) removed • DELETE /accounts/{account_id}/r2/buckets/{bucket_name}/objects/{object_key}: param cf-r2-jurisdiction (header) removed • DELETE /accounts/{account_id}/r2/buckets/{bucket_name}/sippy: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/event_notifications/r2/{bucket_name}/configuration: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/event_notifications/r2/{bucket_name}/configuration/queues/{queue_id}: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/cors: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/domains/custom: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/domains/custom/{domain}: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/domains/managed: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/jobs: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/jobs/{job_id}: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/lifecycle: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/lock: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/objects: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/objects/{object_key}: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/sippy: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs: param cf-r2-jurisdiction (header) removed • GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs/{job_id}: param cf-r2-jurisdiction (header) removed • PATCH /accounts/{account_id}/r2/buckets/{bucket_name}: param cf-r2-jurisdiction (header) removed • POST /accounts/{account_id}/r2/buckets: param cf-r2-jurisdiction (header) removed • POST /accounts/{account_id}/r2/buckets/{bucket_name}/domains/custom: param cf-r2-jurisdiction (header) removed • POST /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs: param cf-r2-jurisdiction (header) removed • PUT /accounts/{account_id}/event_notifications/r2/{bucket_name}/configuration/queues/{queue_id}: param cf-r2-jurisdiction (header) removed • PUT /accounts/{account_id}/r2/buckets/{bucket_name}: param cf-r2-jurisdiction (header) removed • PUT /accounts/{account_id}/r2/buckets/{bucket_name}/cors: param cf-r2-jurisdiction (header) removed • PUT /accounts/{account_id}/r2/buckets/{bucket_name}/domains/custom/{domain}: param cf-r2-jurisdiction (header) removed • PUT /accounts/{account_id}/r2/buckets/{bucket_name}/domains/managed: param cf-r2-jurisdiction (header) removed • PUT /accounts/{account_id}/r2/buckets/{bucket_name}/lifecycle: param cf-r2-jurisdiction (header) removed • PUT /accounts/{account_id}/r2/buckets/{bucket_name}/lock: param cf-r2-jurisdiction (header) removed • PUT /accounts/{account_id}/r2/buckets/{bucket_name}/objects/{object_key}: param cf-r2-jurisdiction (header) removed • PUT /accounts/{account_id}/r2/buckets/{bucket_name}/sippy: param cf-r2-jurisdiction (header) removed • Deprecated endpoint DELETE /accounts/{account_id}/cloudforce-one/events/categories/{category_id} (still works) • Deprecated endpoint DELETE /accounts/{account_id}/cloudforce-one/events/tags/categories/{category_uuid} (still works) • Deprecated endpoint DELETE /accounts/{account_id}/cloudforce-one/events/{dataset_id}/delete (still works) • Deprecated endpoint GET /accounts/{account_id}/cloudforce-one/events/categories/{category_id} (still works) • Deprecated endpoint GET /accounts/{account_id}/cloudforce-one/events/raw/{dataset_id}/{event_id} (still works) • Deprecated endpoint GET /accounts/{account_id}/cloudforce-one/events/tags/categories/{category_uuid} (still works) • Deprecated endpoint GET /accounts/{account_id}/cloudforce-one/events/{event_id}/relationships (still works) • Deprecated endpoint PATCH /accounts/{account_id}/cloudforce-one/events/categories/{category_id} (still works) • Deprecated endpoint PATCH /accounts/{account_id}/cloudforce-one/events/tags/categories/{category_uuid} (still works) • Deprecated endpoint POST /accounts/{account_id}/cloudforce-one/events/categories/{category_id} (still works) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Wed, 16 Sep 2026 07:42:12 GMT Cloudflare adds Workflow event streaming, Browser Run guardrails, DLP Passive Detection, and per-Worker role-based access controls⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds WorkflowInstance.subscribe() method and `GET /subscribe` API endpoint to stream Workflow instance events (steps, attempts, sleeps, waits, rollbacks) without polling; supports `filter` for specific event types and `cursor` to start at a specific event.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `byok_only: true` field on the `PUT` gateway API request to require provider credentials for AI Gateway third-party requests and prevent fallback to Unified Billing; adds per-request `cf-aig-no-wholesale: true` header for request-level enforcement. • Adds `include_shadow_metadata=true` query parameter to the DNS records API to return shadow metadata identifying delegating `NS` records and glue `A`/`AAAA` records for shadowed DNS entries. • Adds `VoiceTurnMetrics` typed summary to `@cloudflare/voice` v0.4.0 via addEventListener('turnmetrics', ...), exposing per-turn `turnId`, terminal outcomes (`completed`, `no_output`, `output_limit`, `content_filtered`, `model_error`, `tts_error`, `aborted`), and stage timings (speech-to-final-transcript, model-to-first-text, TTS-to-first-audio, total turn duration). • Adds per-Worker role-based access controls with four roles — `Metadata Read-Only`, `Content Read-Only`, `Editor`, and `Admin` — configurable via the Cloudflare dashboard, API, or Terraform for teammates, agents, and CI/CD workflows. • Extends Hyperdrive support to Python Workers for connecting to PostgreSQL and MySQL databases. • Adds tagged targets and tag-based target criteria (`include`, `require`, `exclude` operators) to Access for Infrastructure, manageable inline or via the Resource Tagging API. • Adds shadowed record warnings to all zones in the Cloudflare dashboard, identifying DNS records that will not be served due to subdomain delegation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Mon, 14 Sep 2026 14:36:34 GMT Cloudflare: New endpoint DELETE /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{member_account_id}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /accounts/{account_id}/browser-extension/config/inventories • New endpoint GET /accounts/{account_id}/browser-extension/config/inventories/{registration_id} • New endpoint GET /accounts/{account_id}/email-security/analytics/monthly_report • New endpoint GET /accounts/{account_id}/r2-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-runs • New endpoint GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs • New endpoint GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs/{job_id} • New endpoint POST /accounts/{account_id}/r2-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-configs/{configuration_type}/queue • New endpoint POST /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs • New endpoint PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{member_account_id} Breaking changes: • Removed endpoint DELETE /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{account_id} • Removed endpoint DELETE /accounts/{account_id}/workers/observability/metricsexport • Removed endpoint PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{account_id} • DELETE /accounts/{account_id}/pcaps/ownership/{ownership_id}: response schema changed • GET /accounts/{account_id}/pcaps: response schema changed • GET /accounts/{account_id}/pcaps/ownership: response schema changed • GET /accounts/{account_id}/pcaps/{pcap_id}: response schema changed • GET /accounts/{account_id}/pcaps/{pcap_id}/download: response schema changed • POST /accounts/{account_id}/pcaps: response schema changed • POST /accounts/{account_id}/pcaps/ownership: response schema changed • POST /accounts/{account_id}/pcaps/ownership/validate: response schema changed • POST /accounts/{account_id}/workers/observability/metricsexport: request body changed; response schema changed • PUT /accounts/{account_id}/pcaps/{pcap_id}/stop: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Sun, 13 Sep 2026 14:45:48 GMT Cloudflare: New endpoint DELETE /accounts/{account_id}/field_extractors/{extractor} • New endpoint GET /accounts/{account_id}/field_extractors/{extractor} • New endpoint GET /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/rules • New endpoint GET /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/settings • New endpoint PATCH /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/settings • New endpoint PUT /accounts/{account_id}/field_extractors/{extractor} • New endpoint PUT /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/rules • GET /accounts/{account_id}/containers/applications/{application_id}/instances: param name_prefix (query) added; param state (query) added • GET /accounts/{account_id}/gateway/lists: param direction (query) added; param filter (query) added; param order_by (query) added; param search (query) added • GET /accounts/{account_id}/gateway/locations: param direction (query) added; param filter (query) added; param order_by (query) added; param search (query) added • GET /accounts/{account_id}/gateway/proxy_endpoints: param direction (query) added; param filter (query) added; param order_by (query) added; param search (query) added • GET /accounts/{account_id}/gateway/rules: param direction (query) added; param filter (query) added; param order_by (query) added; param search (query) added Breaking changes: • Removed endpoint DELETE /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{account_id} • Removed endpoint DELETE /accounts/{account_id}/workers/observability/metricsexport • Removed endpoint PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{account_id} • DELETE /accounts/{account_id}/pcaps/ownership/{ownership_id}: response schema changed • GET /accounts/{account_id}/pcaps: response schema changed • GET /accounts/{account_id}/pcaps/ownership: response schema changed • GET /accounts/{account_id}/pcaps/{pcap_id}: response schema changed • GET /accounts/{account_id}/pcaps/{pcap_id}/download: response schema changed • POST /accounts/{account_id}/pcaps: response schema changed • POST /accounts/{account_id}/pcaps/ownership: response schema changed • POST /accounts/{account_id}/pcaps/ownership/validate: response schema changed • POST /accounts/{account_id}/workers/observability/metricsexport: request body changed; response schema changed • PUT /accounts/{account_id}/pcaps/{pcap_id}/stop: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Sat, 12 Sep 2026 13:27:27 GMT API surface changed: +20 endpoints, −3 endpoints, 162 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/artifacts/namespaces/{namespace} • New endpoint POST /accounts/{account_id}/artifacts/namespaces • New endpoint POST /accounts/{account_id}/infrastructure/targets/batch_tags • GET /accounts/{account_id}/infrastructure/targets: param tag (query) added • GET /organizations/{organization_id}/accounts: param include_total (query) added Breaking changes: • Removed endpoint DELETE /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{account_id} • Removed endpoint DELETE /accounts/{account_id}/workers/observability/metricsexport • Removed endpoint PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{account_id} • DELETE /accounts/{account_id}/pcaps/ownership/{ownership_id}: response schema changed • GET /accounts/{account_id}/pcaps: response schema changed • GET /accounts/{account_id}/pcaps/ownership: response schema changed • GET /accounts/{account_id}/pcaps/{pcap_id}: response schema changed • GET /accounts/{account_id}/pcaps/{pcap_id}/download: response schema changed • POST /accounts/{account_id}/pcaps: response schema changed • POST /accounts/{account_id}/pcaps/ownership: response schema changed • POST /accounts/{account_id}/pcaps/ownership/validate: response schema changed • POST /accounts/{account_id}/workers/observability/metricsexport: request body changed; response schema changed • PUT /accounts/{account_id}/pcaps/{pcap_id}/stop: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Fri, 11 Sep 2026 14:44:19 GMT Cloudflare: New endpoint DELETE /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{member_account_id}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /accounts/{account_id}/browser-extension/config/inventories • New endpoint GET /accounts/{account_id}/browser-extension/config/inventories/{registration_id} • New endpoint GET /accounts/{account_id}/email-security/analytics/monthly_report • New endpoint GET /accounts/{account_id}/r2-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-runs • New endpoint GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs • New endpoint GET /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs/{job_id} • New endpoint POST /accounts/{account_id}/r2-catalog/{bucket_name}/namespaces/{namespace}/tables/{table_name}/maintenance-configs/{configuration_type}/queue • New endpoint POST /accounts/{account_id}/r2/buckets/{bucket_name}/storage-class-migration-jobs • New endpoint PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{member_account_id} Breaking changes: • Removed endpoint DELETE /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{account_id} • Removed endpoint DELETE /accounts/{account_id}/workers/observability/metricsexport • Removed endpoint PUT /accounts/{account_id}/addressing/address_maps/{address_map_id}/accounts/{account_id} • DELETE /accounts/{account_id}/pcaps/ownership/{ownership_id}: response schema changed • GET /accounts/{account_id}/pcaps: response schema changed • GET /accounts/{account_id}/pcaps/ownership: response schema changed • GET /accounts/{account_id}/pcaps/{pcap_id}: response schema changed • GET /accounts/{account_id}/pcaps/{pcap_id}/download: response schema changed • POST /accounts/{account_id}/pcaps: response schema changed • POST /accounts/{account_id}/pcaps/ownership: response schema changed • POST /accounts/{account_id}/pcaps/ownership/validate: response schema changed • POST /accounts/{account_id}/workers/observability/metricsexport: request body changed; response schema changed • PUT /accounts/{account_id}/pcaps/{pcap_id}/stop: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Thu, 10 Sep 2026 14:44:35 GMT API surface changed: +7 endpoints, −1 endpoint, 58 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /accounts/{account_id}/field_extractors/{extractor}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /accounts/{account_id}/field_extractors/{extractor} • New endpoint GET /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/rules • New endpoint GET /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/settings • New endpoint PATCH /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/settings • New endpoint PUT /accounts/{account_id}/field_extractors/{extractor} • New endpoint PUT /accounts/{account_id}/workers/observability/zones/{zone_id}/observability/tracing/rules • GET /accounts/{account_id}/containers/applications/{application_id}/instances: param name_prefix (query) added; param state (query) added • GET /accounts/{account_id}/gateway/lists: param direction (query) added; param filter (query) added; param order_by (query) added; param search (query) added • GET /accounts/{account_id}/gateway/locations: param direction (query) added; param filter (query) added; param order_by (query) added; param search (query) added • GET /accounts/{account_id}/gateway/proxy_endpoints: param direction (query) added; param filter (query) added; param order_by (query) added; param search (query) added • GET /accounts/{account_id}/gateway/rules: param direction (query) added; param filter (query) added; param order_by (query) added; param search (query) added Breaking changes: • Removed endpoint DELETE /accounts/{account_id}/workers/observability/metricsexport • POST /accounts/{account_id}/workers/observability/metricsexport: request body changed; response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Tue, 08 Sep 2026 07:44:26 GMT Cloudflare adds 64 MiB Worker bundles, WSGI/ASGI Python support, Images text rasterization, and bulk tunnel route creation • Adds `--outdir` and `--dry-run` flags to `wrangler deploy` to inspect uncompressed bundle size before deploying, now checked against a unified 64 MiB limit across Free and Paid plans (previously 3 MB / 10 MB compressed) • Adds wsgi.entrypoint() and asgi.entrypoint() from the `workers` module to support WSGI frameworks (Django, Flask) and ASGI frameworks (FastAPI, Starlette) in Python Workers • Adds .text() method to the Images binding to rasterize text into or over an image, with `font`, `size`, and `color` style options; also adds a `text` key to the `draw` array in `cf.image` • Adds `filter.metadata` parameter to .list() in the Images binding to filter hosted images by custom metadata, including bounded range conditions (e.g., `priority: { gte: 2, lte: 5 }`) • Adds .signedUrl() to the Images binding to generate signed URLs for private hosted images server-side • Adds .createDirectUpload() to the Images binding to create Direct Creator Upload links for client-side image uploads • Adds `headers` option to .response() in the Images binding to set response headers in a single call; `Content-Type` is always taken from the optimized image and cannot be overridden • Adds `Source subnets` field in Traffic Steering (Breakout traffic / Prioritized traffic) on the Cloudflare One Appliance dashboard to match traffic by source IP range when defining custom applications • Enables defining and editing custom applications for breakout and prioritized traffic directly from the Cloudflare One Appliance dashboard under Traffic Steering, without calling the API • Enables configuring custom DHCP options (PXE/iPXE boot, VoIP provisioning, vendor-specific, or arbitrary option code/type/value) from the Cloudflare One Appliance dashboard under LAN configuration > DHCP server options • Supports bulk creation of Cloudflare Tunnel and Cloudflare Mesh routes in a single action: comma-separated CIDR ranges or hostnames, 'Add another' staging, and automatic removal of successfully created routes on partial failure • Adds Cursor self-hosted machines integration, running Cursor Cloud Agents on Cloudflare Containers with a Durable Object namespace, R2 bucket binding, and cron trigger via the open-source Cursor Cloudflare Workers template • Refreshes Log Explorer dataset configuration with grouped field selection (with per-category counts), field data-type details, bulk select/reset controls, and ingestion filters accessible via 'Add dataset' or Actions > Edit Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Mon, 07 Sep 2026 13:45:53 GMT API surface changed: 15 modified • DELETE /accounts/{account_id}/devices/networks/{network_id}: request body changed • DELETE /accounts/{account_id}/devices/policy/{policy_id}: request body changed • DELETE /accounts/{account_id}/devices/posture/integration/{integration_id}: request body changed • DELETE /accounts/{account_id}/devices/posture/{rule_id}: request body changed • DELETE /accounts/{account_id}/event_subscriptions/subscriptions/{subscription_id}: response schema changed • GET /accounts/{account_id}/artifacts/namespaces/{namespace}/repos: response schema changed • GET /accounts/{account_id}/artifacts/namespaces/{namespace}/repos/{name}: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/indicators: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles: param article_id (query) added • POST /accounts/{account_id}/artifacts/namespaces/{namespace}/repos: response schema changed • POST /accounts/{account_id}/artifacts/namespaces/{namespace}/repos/{name}/fork: response schema changed • POST /accounts/{account_id}/artifacts/namespaces/{namespace}/repos/{name}/import: response schema changed • POST /accounts/{account_id}/cloudforce-one/events/create: request body changed • POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tag: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-09-07-attack-signature-detection/ https://developers.cloudflare.com/changelog/post/2026-09-07-attack-signature-detection/ Mon, 07 Sep 2026 00:00:00 GMT Cloudflare WAF gains Attack Signature Detection (Early Access): passive signature matching with Security Analytics review before mitigation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Attack Signature Detection (Early Access), which evaluates requests against Cloudflare attack signatures and records matches without applying a mitigation action, so you can investigate detected traffic before deciding how to respond.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Surfaces matched signature references, categories, confidence levels, and request outcomes in Security Analytics > Attack Analysis for pre-mitigation review. • Enables use of Attack Signature Detection fields in Security Rules, combinable with request properties such as hostname, path, and HTTP method, to apply scoped mitigation after investigation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/post/2026-09-07-application-profiles/ https://developers.cloudflare.com/changelog/post/2026-09-07-application-profiles/ Mon, 07 Sep 2026 00:00:00 GMT Cloudflare WAF gains Application Profiles for positive-security enforcement, starting with Schema Profiles that learn and validate request structure.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces Application Profiles, a new positive-security layer for Cloudflare WAF that learns expected request structure and classifies traffic as conforming or non-conforming without blocking.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Schema Profiles as the first profile type, modeling path variables, query parameters, headers, cookies, JSON bodies, and form-encoded bodies — including field types, numeric ranges, string lengths, and character classes. • Adds Profile Analysis view in Security Analytics to review conformance trends and sampled violation details before enforcing a profile. • Enables enforcement of Application Profiles via Custom Rules, allowing scope by hostname, path, operation, or other security signals such as Attack Score. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/openapi.json https://developers.cloudflare.com/openapi.json Fri, 04 Sep 2026 07:46:45 GMT API surface changed: +42 endpoints, −1 endpoint, 421 modified • New endpoint DELETE /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tags/{tag_id} • New endpoint DELETE /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/{curated_feed_id} • New endpoint DELETE /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id} • New endpoint DELETE /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id} • New endpoint GET /accounts/{account_id}/abuse-reports/submitted • New endpoint GET /accounts/{account_id}/abuse-reports/submitted/{report_id} • New endpoint GET /accounts/{account_id}/abuse-reports/submitted/{report_id}/emails • New endpoint GET /accounts/{account_id}/agent-memory/namespaces/{namespace_name}/profiles • New endpoint GET /accounts/{account_id}/cloudforce-one/banner/{config_id} • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id} • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/content • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/skills/{skill_id}/output • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}/raw • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}/skills • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/health • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/indicators • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id} • New endpoint GET /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}/tag-categories • New endpoint GET /accounts/{account_id}/email/sending/reputation • New endpoint GET /accounts/{account_id}/images/v2/metadata/keys • New endpoint GET /accounts/{account_id}/workflows/{workflow_name}/instances/{instance_id}/subscribe/token • New endpoint GET /radar/annotations/{id} • New endpoint GET /radar/traffic_anomalies/{uuid} • New endpoint PATCH /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles • New endpoint PATCH /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id} • New endpoint PATCH /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/opt-out • New endpoint PATCH /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/{curated_feed_id} • New endpoint PATCH /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id} • New endpoint PATCH /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id} • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tag • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/articles/{article_id}/tags • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/curated-feeds/bulk • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/poll • New endpoint POST /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills • New endpoint PUT /accounts/{account_id}/cloudforce-one/v2/threat-signals/feeds/{feed_id}/skills • New endpoint PUT /accounts/{account_id}/cloudforce-one/v2/threat-signals/skills/{skill_id}/tag-categories • DELETE /accounts/{account_id}/builds/repos/connections/{repo_connection_uuid}: response schema changed • DELETE /accounts/{account_id}/builds/tokens/{build_token_uuid}: response schema changed • DELETE /accounts/{account_id}/builds/triggers/{trigger_uuid}: response schema changed • DELETE /accounts/{account_id}/builds/triggers/{trigger_uuid}/environment_variables/{environment_variable_key}: response schema changed • DELETE /accounts/{account_id}/builds/workers/{script_name}/deploy_hooks/{deploy_hook_uuid}: response schema changed • DELETE /accounts/{account_id}/cfd_tunnel/{tunnel_id}: request body changed • DELETE /accounts/{account_id}/cfd_tunnel/{tunnel_id}/connections: request body changed • DELETE /accounts/{account_id}/cloudforce-one/v2/brand-protection/domain/queries/{query_id}: response schema changed • DELETE /accounts/{account_id}/cloudforce-one/v2/brand-protection/letter/templates/{template_id}: response schema changed • DELETE /accounts/{account_id}/cloudforce-one/v2/brand-protection/logo/queries/{query_id}: response schema changed • DELETE /accounts/{account_id}/cloudforce-one/v2/brand-protection/takedown-notices/{notice_id}: response schema changed • DELETE /accounts/{account_id}/cloudforce-one/v2/brand-protection/takedown-notices/{notice_id}/letters/{letter_id}: response schema changed • DELETE /accounts/{account_id}/custom_csrs/{custom_csr_id}: request body changed • DELETE /accounts/{account_id}/magic/advanced_dns_protection/configs/dns_protection/rules: response schema changed • DELETE /accounts/{account_id}/magic/gre_tunnels/{gre_tunnel_id}: request body changed • DELETE /accounts/{account_id}/magic/ipsec_tunnels/{ipsec_tunnel_id}: request body changed • DELETE /accounts/{account_id}/magic/routes/{route_id}: request body changed • DELETE /accounts/{account_id}/magic/sites/{site_id}: request body changed • DELETE /accounts/{account_id}/magic/sites/{site_id}/acls/{acl_id}: request body changed • DELETE /accounts/{account_id}/magic/sites/{site_id}/lans/{lan_id}: request body changed • DELETE /accounts/{account_id}/magic/sites/{site_id}/netflow_config: request body changed • DELETE /accounts/{account_id}/magic/sites/{site_id}/wans/{wan_id}: request body changed • DELETE /accounts/{account_id}/mtls_certificates/{mtls_certificate_id}: request body changed • DELETE /accounts/{account_id}/stream/keys/{identifier}: request body changed • DELETE /accounts/{account_id}/stream/live_inputs/{live_input_identifier}: request body changed • DELETE /accounts/{account_id}/stream/live_inputs/{live_input_identifier}/outputs/{output_identifier}: request body changed • DELETE /accounts/{account_id}/teamnet/virtual_networks/{virtual_network_id}: request body changed • DELETE /accounts/{account_id}/warp_connector/{tunnel_id}: request body changed • DELETE /accounts/{account_id}/workers/dispatch/namespaces/{dispatch_namespace}/scripts/{script_name}: request body changed • DELETE /accounts/{account_id}/workers/scripts/{script_name}: request body changed • DELETE /accounts/{account_id}/workers/scripts/{script_name}/tails/{id}: request body changed • DELETE /certificates/{certificate_id}: request body changed • DELETE /zones/{zone_id}: request body changed • DELETE /zones/{zone_id}/custom_certificates/{custom_certificate_id}: request body changed • DELETE /zones/{zone_id}/custom_csrs/{custom_csr_id}: request body changed • DELETE /zones/{zone_id}/custom_hostnames/fallback_origin: request body changed • DELETE /zones/{zone_id}/custom_hostnames/{custom_hostname_id}: request body changed • DELETE /zones/{zone_id}/custom_hostnames/{custom_hostname_id}/certificate_pack/{certificate_pack_id}/certificates/{certificate_id}: request body changed • DELETE /zones/{zone_id}/keyless_certificates/{keyless_certificate_id}: request body changed • DELETE /zones/{zone_id}/origin_tls_client_auth/hostnames/certificates/{certificate_id}: request body changed • DELETE /zones/{zone_id}/origin_tls_client_auth/{certificate_id}: request body changed • DELETE /zones/{zone_id}/ssl/certificate_packs/{certificate_pack_id}: request body changed • GET /accounts/{account_id}/artifacts/namespaces/{namespace}/repos: response schema changed • GET /accounts/{account_id}/artifacts/namespaces/{namespace}/repos/{name}: response schema changed • GET /accounts/{account_id}/billable/usage: response schema changed • GET /accounts/{account_id}/builds/account/limits: response schema changed • GET /accounts/{account_id}/builds/builds: response schema changed • GET /accounts/{account_id}/builds/builds/latest: response schema changed • GET /accounts/{account_id}/builds/builds/{build_uuid}: response schema changed • GET /accounts/{account_id}/builds/builds/{build_uuid}/logs: response schema changed • GET /accounts/{account_id}/builds/repos/{provider_type}/{provider_account_id}/{repo_id}/config_autofill: response schema changed • GET /accounts/{account_id}/builds/tokens: response schema changed • GET /accounts/{account_id}/builds/triggers/{trigger_uuid}/environment_variables: response schema changed • GET /accounts/{account_id}/builds/workers/{external_script_id}/builds: response schema changed • GET /accounts/{account_id}/builds/workers/{external_script_id}/triggers: response schema changed • GET /accounts/{account_id}/builds/workers/{script_name}/deploy_hooks: response schema changed • GET /accounts/{account_id}/builds/workers/{script_name}/deploy_hooks/{deploy_hook_uuid}: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators/{indicator_id}: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators/{indicator_id}/relationships: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/tags/{tag_uuid}/indicators: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/indicators: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/queries: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/tags: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/tags/categories: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/tags/categories/{category_uuid}: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/tags/{tag_uuid}: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/tags/{tag_uuid}/indicators: response schema changed • GET /accounts/{account_id}/cloudforce-one/events/tags/{tag_uuid}/relationships: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/domain/matches: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/domain/queries: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/letter/templates: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/letter/templates/examples: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/letter/templates/{template_id}: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/logo/matches: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/logo/queries: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/takedown-notices: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/takedown-notices/{notice_id}: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/takedown-notices/{notice_id}/letters: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/takedown-notices/{notice_id}/letters/{letter_id}: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/takedown-notices/{notice_id}/letters/{letter_id}/pdf: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/brand-protection/total-queries: response schema changed • GET /accounts/{account_id}/cloudforce-one/v2/collections: response schema changed • GET /accounts/{account_id}/email-security/investigate: param smtp_helo_ip (query) added • GET /accounts/{account_id}/email/sending/messages/{message_id}: response schema changed • GET /accounts/{account_id}/pipelines/v1/sinks: response schema changed • GET /accounts/{account_id}/pipelines/v1/sinks/{sink_id}: response schema changed • GET /accounts/{account_id}/pipelines/v1/streams: response schema changed • GET /accounts/{account_id}/pipelines/v1/streams/{stream_id}: response schema changed • GET /accounts/{account_id}/workers/observability/usage: response schema changed • GET /accounts/{account_id}/workflows: response schema changed • GET /accounts/{account_id}/workflows/{workflow_name}: response schema changed • GET /organizations/{organization_id}/billable/usage: response schema changed • GET /radar/ai/bots/summary/user_agent: response schema changed • GET /radar/ai/bots/summary/{dimension}: response schema changed • GET /radar/ai/bots/timeseries: response schema changed • GET /radar/ai/bots/timeseries_groups/user_agent: response schema changed • GET /radar/ai/bots/timeseries_groups/{dimension}: response schema changed • GET /radar/ai/inference/summary/model: response schema changed • GET /radar/ai/inference/summary/task: response schema changed • GET /radar/ai/inference/summary/{dimension}: response schema changed • GET /radar/ai/inference/timeseries_groups/model: response schema changed • GET /radar/ai/inference/timeseries_groups/task: response schema changed • GET /radar/ai/inference/timeseries_groups/{dimension}: response schema changed • GET /radar/ai/markdown_for_agents/summary: response schema changed • GET /radar/ai/markdown_for_agents/timeseries: response schema changed • GET /radar/annotations: param bot (query) added; param ca (query) added; param geoId (query) added; param log (query) added; param outageCause (query) added; param outageType (query) added; param query (query) added; param tags (query) added; param tld (query) added; response schema changed • GET /radar/annotations/outages: param bot (query) added; param ca (query) added; param dataSource (query) added; param geoId (query) added; param log (query) added; param outageCause (query) added; param outageType (query) added; param query (query) added; param tags (query) added; param tld (query) added; response schema changed • GET /radar/as112/summary/dnssec: response schema changed • GET /radar/as112/summary/edns: response schema changed • GET /radar/as112/summary/ip_version: response schema changed • GET /radar/as112/summary/protocol: response schema changed • GET /radar/as112/summary/query_type: response schema changed • GET /radar/as112/summary/response_codes: response schema changed • GET /radar/as112/summary/{dimension}: response schema changed • GET /radar/as112/timeseries: response schema changed • GET /radar/as112/timeseries_groups/dnssec: response schema changed • GET /radar/as112/timeseries_groups/edns: response schema changed • GET /radar/as112/timeseries_groups/ip_version: response schema changed • GET /radar/as112/timeseries_groups/protocol: response schema changed • GET /radar/as112/timeseries_groups/query_type: response schema changed • GET /radar/as112/timeseries_groups/response_codes: response schema changed • GET /radar/as112/timeseries_groups/{dimension}: response schema changed • GET /radar/as112/top/locations: response schema changed • GET /radar/as112/top/locations/dnssec/{dnssec}: response schema changed • GET /radar/as112/top/locations/edns/{edns}: response schema changed • GET /radar/as112/top/locations/ip_version/{ip_version}: response schema changed • GET /radar/attacks/layer3/summary/bitrate: response schema changed • GET /radar/attacks/layer3/summary/duration: response schema changed • GET /radar/attacks/layer3/summary/industry: response schema changed • GET /radar/attacks/layer3/summary/ip_version: response schema changed • GET /radar/attacks/layer3/summary/protocol: response schema changed • GET /radar/attacks/layer3/summary/vector: response schema changed • GET /radar/attacks/layer3/summary/vertical: response schema changed • GET /radar/attacks/layer3/summary/{dimension}: response schema changed • GET /radar/attacks/layer3/timeseries: response schema changed • GET /radar/attacks/layer3/timeseries_groups/bitrate: response schema changed • GET /radar/attacks/layer3/timeseries_groups/duration: response schema changed • GET /radar/attacks/layer3/timeseries_groups/industry: response schema changed • GET /radar/attacks/layer3/timeseries_groups/ip_version: response schema changed • GET /radar/attacks/layer3/timeseries_groups/protocol: response schema changed • GET /radar/attacks/layer3/timeseries_groups/vector: response schema changed • GET /radar/attacks/layer3/timeseries_groups/vertical: response schema changed • GET /radar/attacks/layer3/timeseries_groups/{dimension}: response schema changed • GET /radar/attacks/layer3/top/attacks: response schema changed • GET /radar/attacks/layer3/top/industry: response schema changed • GET /radar/attacks/layer3/top/locations/origin: response schema changed • GET /radar/attacks/layer3/top/locations/target: response schema changed • GET /radar/attacks/layer3/top/vertical: response schema changed • GET /radar/attacks/layer7/summary/http_method: response schema changed • GET /radar/attacks/layer7/summary/http_version: response schema changed • GET /radar/attacks/layer7/summary/industry: response schema changed • GET /radar/attacks/layer7/summary/ip_version: response schema changed • GET /radar/attacks/layer7/summary/managed_rules: response schema changed • GET /radar/attacks/layer7/summary/mitigation_product: response schema changed • GET /radar/attacks/layer7/summary/vertical: response schema changed • GET /radar/attacks/layer7/summary/{dimension}: response schema changed • GET /radar/attacks/layer7/timeseries: response schema changed • GET /radar/attacks/layer7/timeseries_groups/http_method: response schema changed • GET /radar/attacks/layer7/timeseries_groups/http_version: response schema changed • GET /radar/attacks/layer7/timeseries_groups/industry: response schema changed • GET /radar/attacks/layer7/timeseries_groups/ip_version: response schema changed • GET /radar/attacks/layer7/timeseries_groups/managed_rules: response schema changed • GET /radar/attacks/layer7/timeseries_groups/mitigation_product: response schema changed • GET /radar/attacks/layer7/timeseries_groups/vertical: response schema changed • GET /radar/attacks/layer7/timeseries_groups/{dimension}: response schema changed • GET /radar/attacks/layer7/top/ases/origin: response schema changed • GET /radar/attacks/layer7/top/attacks: response schema changed • GET /radar/attacks/layer7/top/industry: response schema changed • GET /radar/attacks/layer7/top/locations/origin: response schema changed • GET /radar/attacks/layer7/top/locations/target: response schema changed • GET /radar/attacks/layer7/top/vertical: response schema changed • GET /radar/bgp/ips/timeseries: response schema changed • GET /radar/bgp/timeseries: response schema changed • GET /radar/bots/crawlers/summary/{dimension}: response schema changed • GET /radar/bots/crawlers/timeseries_groups/{dimension}: response schema changed • GET /radar/bots/summary/{dimension}: response schema changed • GET /radar/bots/timeseries: response schema changed • GET /radar/bots/timeseries_groups/{dimension}: response schema changed • GET /radar/ct/summary/{dimension}: response schema changed • GET /radar/ct/timeseries: response schema changed • GET /radar/ct/timeseries_groups/{dimension}: response schema changed • GET /radar/dns/summary/cache_hit: response schema changed • GET /radar/dns/summary/dnssec: response schema changed • GET /radar/dns/summary/dnssec_aware: response schema changed • GET /radar/dns/summary/dnssec_e2e: response schema changed • GET /radar/dns/summary/ip_version: response schema changed • GET /radar/dns/summary/matching_answer: response schema changed • GET /radar/dns/summary/protocol: response schema changed • GET /radar/dns/summary/query_type: response schema changed • GET /radar/dns/summary/response_code: response schema changed • GET /radar/dns/summary/response_ttl: response schema changed • GET /radar/dns/summary/{dimension}: response schema changed • GET /radar/dns/timeseries: response schema changed • GET /radar/dns/timeseries_groups/cache_hit: response schema changed • GET /radar/dns/timeseries_groups/dnssec: response schema changed • GET /radar/dns/timeseries_groups/dnssec_aware: response schema changed • GET /radar/dns/timeseries_groups/dnssec_e2e: response schema changed • GET /radar/dns/timeseries_groups/ip_version: response schema changed • GET /radar/dns/timeseries_groups/matching_answer: response schema changed • GET /radar/dns/timeseries_groups/protocol: response schema changed • GET /radar/dns/timeseries_groups/query_type: response schema changed • GET /radar/dns/timeseries_groups/response_code: response schema changed • GET /radar/dns/timeseries_groups/response_ttl: response schema changed • GET /radar/dns/timeseries_groups/{dimension}: response schema changed • GET /radar/dns/top/ases: response schema changed • GET /radar/dns/top/locations: response schema changed • GET /radar/email/routing/summary/arc: response schema changed • GET /radar/email/routing/summary/dkim: response schema changed • GET /radar/email/routing/summary/dmarc: response schema changed • GET /radar/email/routing/summary/encrypted: response schema changed • GET /radar/email/routing/summary/ip_version: response schema changed • GET /radar/email/routing/summary/spf: response schema changed • GET /radar/email/routing/summary/{dimension}: response schema changed • GET /radar/email/routing/timeseries_groups/arc: response schema changed • GET /radar/email/routing/timeseries_groups/dkim: response schema changed • GET /radar/email/routing/timeseries_groups/dmarc: response schema changed • GET /radar/email/routing/timeseries_groups/encrypted: response schema changed • GET /radar/email/routing/timeseries_groups/ip_version: response schema changed • GET /radar/email/routing/timeseries_groups/spf: response schema changed • GET /radar/email/routing/timeseries_groups/{dimension}: response schema changed • GET /radar/email/security/summary/arc: response schema changed • GET /radar/email/security/summary/dkim: response schema changed • GET /radar/email/security/summary/dmarc: response schema changed • GET /radar/email/security/summary/malicious: response schema changed • GET /radar/email/security/summary/spam: response schema changed • GET /radar/email/security/summary/spf: response schema changed • GET /radar/email/security/summary/spoof: response schema changed • GET /radar/email/security/summary/threat_category: response schema changed • GET /radar/email/security/summary/tls_version: response schema changed • GET /radar/email/security/summary/{dimension}: response schema changed • GET /radar/email/security/timeseries_groups/arc: response schema changed • GET /radar/email/security/timeseries_groups/dkim: response schema changed • GET /radar/email/security/timeseries_groups/dmarc: response schema changed • GET /radar/email/security/timeseries_groups/malicious: response schema changed • GET /radar/email/security/timeseries_groups/spam: response schema changed • GET /radar/email/security/timeseries_groups/spf: response schema changed • GET /radar/email/security/timeseries_groups/spoof: response schema changed • GET /radar/email/security/timeseries_groups/threat_category: response schema changed • GET /radar/email/security/timeseries_groups/tls_version: response schema changed • GET /radar/email/security/timeseries_groups/{dimension}: response schema changed • GET /radar/email/security/top/tlds: response schema changed • GET /radar/email/security/top/tlds/malicious/{malicious}: response schema changed • GET /radar/email/security/top/tlds/spam/{spam}: response schema changed • GET /radar/email/security/top/tlds/spoof/{spoof}: response schema changed • GET /radar/http/summary/bot_class: response schema changed • GET /radar/http/summary/device_type: response schema changed • GET /radar/http/summary/http_protocol: response schema changed • GET /radar/http/summary/http_version: response schema changed • GET /radar/http/summary/ip_version: response schema changed • GET /radar/http/summary/os: response schema changed • GET /radar/http/summary/post_quantum: response schema changed • GET /radar/http/summary/tls_version: response schema changed • GET /radar/http/summary/{dimension}: response schema changed • GET /radar/http/timeseries: response schema changed • GET /radar/http/timeseries_groups/bot_class: response schema changed • GET /radar/http/timeseries_groups/browser: response schema changed • GET /radar/http/timeseries_groups/browser_family: response schema changed • GET /radar/http/timeseries_groups/device_type: response schema changed • GET /radar/http/timeseries_groups/http_protocol: response schema changed • GET /radar/http/timeseries_groups/http_version: response schema changed • GET /radar/http/timeseries_groups/ip_version: response schema changed • GET /radar/http/timeseries_groups/os: response schema changed • GET /radar/http/timeseries_groups/post_quantum: response schema changed • GET /radar/http/timeseries_groups/tls_version: response schema changed • GET /radar/http/timeseries_groups/{dimension}: response schema changed • GET /radar/http/top/ases: response schema changed • GET /radar/http/top/ases/bot_class/{bot_class}: response schema changed • GET /radar/http/top/ases/browser_family/{browser_family}: response schema changed • GET /radar/http/top/ases/device_type/{device_type}: response schema changed • GET /radar/http/top/ases/http_protocol/{http_protocol}: response schema changed • GET /radar/http/top/ases/http_version/{http_version}: response schema changed • GET /radar/http/top/ases/ip_version/{ip_version}: response schema changed • GET /radar/http/top/ases/os/{os}: response schema changed • GET /radar/http/top/ases/tls_version/{tls_version}: response schema changed • GET /radar/http/top/browser: response schema changed • GET /radar/http/top/browser_family: response schema changed • GET /radar/http/top/locations: response schema changed • GET /radar/http/top/locations/bot_class/{bot_class}: response schema changed • GET /radar/http/top/locations/browser_family/{browser_family}: response schema changed • GET /radar/http/top/locations/device_type/{device_type}: response schema changed • GET /radar/http/top/locations/http_protocol/{http_protocol}: response schema changed • GET /radar/http/top/locations/http_version/{http_version}: response schema changed • GET /radar/http/top/locations/ip_version/{ip_version}: response schema changed • GET /radar/http/top/locations/os/{os}: response schema changed • GET /radar/http/top/locations/tls_version/{tls_version}: response schema changed • GET /radar/leaked_credential_checks/summary/bot_class: response schema changed • GET /radar/leaked_credential_checks/summary/compromised: response schema changed • GET /radar/leaked_credential_checks/summary/{dimension}: response schema changed • GET /radar/leaked_credential_checks/timeseries_groups/bot_class: response schema changed • GET /radar/leaked_credential_checks/timeseries_groups/compromised: response schema changed • GET /radar/leaked_credential_checks/timeseries_groups/{dimension}: response schema changed • GET /radar/netflows/summary: response schema changed • GET /radar/netflows/summary/{dimension}: response schema changed • GET /radar/netflows/timeseries: response schema changed • GET /radar/netflows/timeseries_groups/{dimension}: response schema changed • GET /radar/netflows/top/ases: response schema changed • GET /radar/netflows/top/locations: response schema changed • GET /radar/origins/summary/{dimension}: response schema changed • GET /radar/origins/timeseries: response schema changed • GET /radar/origins/timeseries_groups/{dimension}: response schema changed • GET /radar/post_quantum/origin/summary/{dimension}: response schema changed • GET /radar/post_quantum/origin/timeseries_groups/{dimension}: response schema changed • GET /radar/quality/iqi/summary: response schema changed • GET /radar/quality/iqi/timeseries_groups: response schema changed • GET /radar/quality/speed/histogram: response schema changed • GET /radar/quality/speed/summary: response schema changed • GET /radar/quality/speed/top/ases: response schema changed • GET /radar/quality/speed/top/locations: response schema changed • GET /radar/ranking/internet_services/timeseries_groups: response schema changed • GET /radar/ranking/internet_services/top: response schema changed • GET /radar/ranking/timeseries_groups: response schema changed • GET /radar/ranking/top: response schema changed • GET /radar/robots_txt/top/domain_categories: response schema changed • GET /radar/robots_txt/top/user_agents/directive: response schema changed • GET /radar/tcp_resets_timeouts/summary: response schema changed • GET /radar/tcp_resets_timeouts/timeseries_groups: response schema changed • GET /radar/tlds/performance/summary/{dimension}: response schema changed • GET /radar/tlds/performance/timeseries_groups/{dimension}: response schema changed • GET /radar/traffic_anomalies: param dataSource (query) added; response schema changed • GET /radar/verified_bots/top/bots: response schema changed • GET /radar/verified_bots/top/categories: response schema changed • PATCH /accounts/{account_id}/builds/triggers/{trigger_uuid}: response schema changed • PATCH /accounts/{account_id}/builds/triggers/{trigger_uuid}/environment_variables: response schema changed • PATCH /accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators/{indicator_id}: request body changed; response schema changed • PATCH /accounts/{account_id}/cloudforce-one/events/tags/categories/{category_uuid}: request body changed; response schema changed • PATCH /accounts/{account_id}/cloudforce-one/events/tags/{tag_uuid}: request body changed; response schema changed • PATCH /accounts/{account_id}/cloudforce-one/v2/brand-protection/domain/queries/{query_id}: response schema changed • PATCH /accounts/{account_id}/magic/sites/{site_id}/lans/{lan_id}: request body changed • PATCH /accounts/{account_id}/pipelines/v1/streams/{stream_id}: response schema changed • PATCH /accounts/{account_id}/workflows/settings: request body changed • PATCH /accounts/{account_id}/workflows/{workflow_name}/instances/{instance_id}/status: request body changed • POST /accounts/{account_id}/access/certificates: request body changed • POST /accounts/{account_id}/access/groups: request body changed • POST /accounts/{account_id}/access/organizations: request body changed • POST /accounts/{account_id}/access/service_tokens: request body changed • POST /accounts/{account_id}/access/service_tokens/{service_token_id}/rotate: request body changed • POST /accounts/{account_id}/access/tags: request body changed • POST /accounts/{account_id}/access/users: request body changed • POST /accounts/{account_id}/artifacts/namespaces/{namespace}/repos: response schema changed • POST /accounts/{account_id}/artifacts/namespaces/{namespace}/repos/{name}/fork: response schema changed • POST /accounts/{account_id}/artifacts/namespaces/{namespace}/repos/{name}/import: response schema changed • POST /accounts/{account_id}/billable/usage: request body changed; response schema changed • POST /accounts/{account_id}/builds/tokens: response schema changed • POST /accounts/{account_id}/builds/triggers: response schema changed • POST /accounts/{account_id}/builds/triggers/{trigger_uuid}/builds: request body changed; response schema changed • POST /accounts/{account_id}/builds/triggers/{trigger_uuid}/purge_build_cache: response schema changed • POST /accounts/{account_id}/builds/workers/{script_name}/deploy_hooks: response schema changed • POST /accounts/{account_id}/bulk/subscriptions: request body changed • POST /accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators/bulk: request body changed • POST /accounts/{account_id}/cloudforce-one/events/dataset/{dataset_id}/indicators/create: request body changed; response schema changed • POST /accounts/{account_id}/cloudforce-one/events/tags/categories/create: request body changed; response schema changed • POST /accounts/{account_id}/cloudforce-one/events/tags/create: request body changed; response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/brand-protection/domain/queries: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/brand-protection/letter/generate: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/brand-protection/letter/templates: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/brand-protection/logo/queries: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/brand-protection/logo/search: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/brand-protection/takedown-notices/lookup: response schema changed • POST /accounts/{account_id}/cloudforce-one/v2/brand-protection/takedown-notices/{notice_id}/letters: response schema changed • POST /accounts/{account_id}/data-security/posture/remediations/jobs: response schema changed • POST /accounts/{account_id}/email-security/investigate/bulk: request body changed • POST /accounts/{account_id}/email/sending/send: response schema changed • POST /accounts/{account_id}/email/sending/send_raw: response schema changed • POST /accounts/{account_id}/magic/ipsec_tunnels/{ipsec_tunnel_id}/psk_generate: request body changed • POST /accounts/{account_id}/magic/sites/{site_id}/lans: request body changed • POST /accounts/{account_id}/pipelines/v1/sinks: request body changed; response schema changed • POST /accounts/{account_id}/pipelines/v1/streams: request body changed; response schema changed • POST /accounts/{account_id}/pipelines/v1/validate_sql: response schema changed • POST /accounts/{account_id}/registrar-sandbox/registrations: request body changed • POST /accounts/{account_id}/registrar/registrations: request body changed • POST /accounts/{account_id}/slurper/jobs: request body changed • POST /accounts/{account_id}/stream/keys: request body changed • POST /accounts/{account_id}/subscriptions: request body changed • POST /accounts/{account_id}/subscriptions/{subscription_identifier}/action/append: request body changed • POST /accounts/{account_id}/workers/observability/telemetry/keys: response schema changed • POST /accounts/{account_id}/workers/observability/telemetry/query: response schema changed • POST /accounts/{account_id}/workers/observability/telemetry/values: response schema changed • POST /accounts/{account_id}/workers/scripts/{script_name}/tails: request body changed • POST /accounts/{account_id}/workflows/{workflow_name}/instances: request body changed • POST /accounts/{account_id}/workflows/{workflow_name}/instances/batch: request body changed • POST /accounts/{account_id}/workflows/{workflow_name}/instances/batch/delete: request body changed • POST /accounts/{account_id}/workflows/{workflow_name}/instances/batch/terminate: request body changed • POST /accounts/{account_id}/workflows/{workflow_name}/instances/{instance_id}/events/{event_type}: request body changed • POST /user/subscriptions: request body changed • POST /zones/{zone_id}/access/apps/{app_id}/policies: request body changed • POST /zones/{zone_id}/access/certificates: request body changed • POST /zones/{zone_id}/access/groups: request body changed • POST /zones/{zone_id}/access/organizations: request body changed • POST /zones/{zone_id}/access/service_tokens: request body changed • POST /zones/{zone_id}/subscription: request body changed • POST /zones/{zone_id}/subscriptions: request body changed • PUT /accounts/{account_id}/access/certificates/{certificate_id}: request body changed • PUT /accounts/{account_id}/access/groups/{group_id}: request body changed • PUT /accounts/{account_id}/access/keys: request body changed • PUT /accounts/{account_id}/access/organizations: request body changed • PUT /accounts/{account_id}/access/organizations/doh: request body changed • PUT /accounts/{account_id}/access/service_tokens/{service_token_id}: request body changed • PUT /accounts/{account_id}/access/users/{user_id}: request body changed • PUT /accounts/{account_id}/builds/builds/{build_uuid}/cancel: response schema changed • PUT /accounts/{account_id}/builds/repos/connections: request body changed; response schema changed • PUT /accounts/{account_id}/builds/workers/{script_name}/deploy_hooks/{deploy_hook_uuid}: response schema changed • PUT /accounts/{account_id}/cloudforce-one/v2/brand-protection/letter/templates/{template_id}: response schema changed • PUT /accounts/{account_id}/magic/cf_interconnects: request body changed • PUT /accounts/{account_id}/magic/gre_tunnels: request body changed • PUT /accounts/{account_id}/magic/ipsec_tunnels: request body changed • PUT /accounts/{account_id}/magic/sites/{site_id}/lans/{lan_id}: request body changed • PUT /accounts/{account_id}/slurper/target/connectivity-precheck: request body changed • PUT /accounts/{account_id}/subscriptions/{subscription_identifier}: request body changed • PUT /user/subscriptions/{identifier}: request body changed • PUT /zones/{zone_id}/access/apps/{app_id}/policies/{policy_id}: request body changed • PUT /zones/{zone_id}/access/certificates/{certificate_id}: request body changed • PUT /zones/{zone_id}/access/groups/{group_id}: request body changed • PUT /zones/{zone_id}/access/organizations: request body changed • PUT /zones/{zone_id}/access/service_tokens/{service_token_id}: request body changed • PUT /zones/{zone_id}/cloud_connector/rules: request body changed • PUT /zones/{zone_id}/subscription: request body changed • PUT /zones/{zone_id}/subscriptions: request body changed Breaking changes: • Removed endpoint POST /accounts/{account_id}/realtime/kit/{app_id}/livestreams • GET /accounts/{account_id}/email-security/settings/domains/{domain_id}/verification: response schema changed • POST /accounts/{account_id}/access/organizations/revoke_user: request body changed; response schema changed • POST /zones/{zone_id}/access/organizations/revoke_user: request body changed; response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Mon, 31 Aug 2026 20:46:05 GMT Cloudflare adds Content Signals crawl controls, new Workers AI models, symmetric JWT keys, MCP 2026-07-28 support, and Access token management improvements. • Adds `contentUse` parameter to the `POST /client/v4/accounts/{account_id}/browser-rendering/crawl` endpoint, accepting values `reference` or `full` (default), to enforce Content Signals `use` directives from a target site's `robots.txt`; requests are rejected with a `400` if the site's declared level is more restrictive than `contentUse`. • MCP server portal `/mcp` endpoint now accepts stateless MCP `2026-07-28` requests alongside earlier 2025 Streamable HTTP clients, with independent protocol negotiation for client and upstream connections; SSE connections continue to use the legacy protocol. • Durable Objects can now have up to ten concurrent in-flight Dynamic Workers (increased from four), with the limit shared across all concurrent requests to the same Durable Object. • Adds `@cf/zai-org/glm-5.3-flash` (first multimodal GLM-5 model, 320B total / 18B active MoE) to Workers AI. • AI Search gains six additional Workers AI text-generation models: `@cf/openai/gpt-oss-120b` (128,000-token context), `@cf/openai/gpt-oss-20b` (128,000-token context), `@cf/moonshotai/kimi-k2.7-code` (262,144-token context), and three others; no additional provider key required. • Cloudflare Access administrators can now set a grace period (1 hour to 30 days, or a custom RFC 3339 expiration via the API) when rotating a service token secret, keeping both secrets valid during the transition. • Cloudflare Access administrators can now temporarily disable service tokens without deleting them; a disabled token cannot authenticate but its configuration is preserved for re-enabling. • App-scoped API tokens for Flagship are now available, granting access only to selected Flagship apps with 'Evaluate', 'Read', or 'Write' `Flagship App` permissions, selectable via the 'Specified Flagship apps' option in the resource dropdown when creating a custom token. • Radar Researcher responses can now link to relevant Radar pages, reports, and Cloudflare Blog posts, and the 'Explain with AI' button on URL Scanner reports enables AI-driven explanation of scan findings with follow-up Q&A. Breaking changes: • The Azure Functions-based Microsoft Sentinel Logpush connector stops being maintained after 2026-09-14 when Microsoft retires the Azure Monitor HTTP Data Collector API; affected Enterprise customers must migrate to the Cloudflare for Microsoft Sentinel Codeless Connector Framework (CCF) connector before that date. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare https://developers.cloudflare.com/changelog/ https://developers.cloudflare.com/changelog/ Mon, 31 Aug 2026 07:40:29 GMT Cloudflare adds GLM-5.3 models, Durable Object alarm control, JWT symmetric keys, Access token management, and Log Explorer deletion • Adds `{ retryAlarm: false }` option to ctx.abort() in Durable Objects, preventing alarm retries after the object resets — useful for one-shot cleanup alarms. • JWT validation now supports symmetric HMAC keys using `HS256`, `HS384`, and `HS512` algorithms, configurable via the Cloudflare dashboard or API. • Adds grace period option when rotating Access service token secrets (1 hour to 30 days via dashboard; RFC 3339 expiration time via API), keeping both secrets valid during the window. • Adds ability to temporarily disable Access service tokens without deleting them, stopping authentication and any active rotation grace period. • MCP server portal `/mcp` endpoint now accepts stateless MCP `2026-07-28` specification requests alongside earlier 2025 Streamable HTTP clients, with independent client/upstream protocol negotiation. • Durable Objects can now have up to ten concurrent in-flight Dynamic Workers (increased from four); other Workers retain a limit of four per request. • Adds `@cf/zai-org/glm-5.3` (agentic coding model) to Workers AI at $1.40/M input tokens, $0.26/M cached input tokens, $4.40/M output tokens. • Adds `@cf/zai-org/glm-5.3-flash` (multimodal Mixture-of-Experts, 320B total / 18B active parameters) to Workers AI, the first GLM-family model on Workers AI to support multimodal inputs. • AI Search adds six new Workers AI text generation models including `@cf/openai/gpt-oss-120b` (128K context), `@cf/openai/gpt-oss-20b` (128K context), `@cf/moonshotai/kimi-k2.7-code` (262K context), and others with up to 1,048,576-token context windows. • Flagship API tokens can now be scoped to specific apps by selecting 'Specified Flagship apps' in the resource dropdown and assigning Evaluate, Read, or Write permissions per app. Breaking changes: • The Azure Functions-based Microsoft Sentinel Logpush connector will stop working after 2026-09-14 (when Microsoft deprecates the Azure Monitor HTTP Data Collector API); Enterprise customers must migrate to the Cloudflare for Microsoft Sentinel Codeless Connector Framework (CCF) connector before that date. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cloudflare