Adds a new application to Access.

Deletes an application from Access.

Fetches information about an Access application.

Lists all Access applications in an account or zone.

Revokes all tokens issued for an application.

Updates an Access application.

Generates a new short-lived certificate CA and public key.

Deletes a short-lived certificate CA.

Fetches a short-lived certificate CA and its public key.

Lists short-lived certificate CAs and their public keys.

Creates a policy applying exclusive to a single application that defines the users or groups who can reach it. We recommend creating a reusable policy instead and subsequently referencing its ID in the application's 'policies' array.

Deletes an Access policy specific to an application. To delete a reusable policy, use the /account or zones/{account or zone_id}/policies/{uid} endpoint.

Fetches a single Access policy configured for an application. Returns both exclusively owned and reusable policies used by the application.

Lists Access policies configured for an application. Returns both exclusively scoped and reusable policies used by the application.

Updates an Access policy specific to an application. To update a reusable policy, use the /account or zones/{account or zone_id}/policies/{uid} endpoint.

Starts an Access policy test.

Fetches the current status of a given Access policy test.

Fetches a single page of user results from an Access policy test.

Updates Access application settings.

Updates Access application settings.

Tests if a specific user has permission to access an application.

Create a new Bookmark application.

Deletes a Bookmark application.

Fetches a single Bookmark application.

Lists Bookmark applications.

Updates a configured Bookmark application.

Adds a new mTLS root certificate to Access.

Deletes an mTLS certificate.

Fetches a single mTLS certificate.

Lists all mTLS root certificates.

Updates a configured mTLS certificate.

List all mTLS hostname settings for this account or zone.

Updates an mTLS certificate's hostname settings.

Create a custom page

Delete a custom page

Fetches a custom page and also returns its HTML.

List custom pages

Update a custom page

Adds a new SSH Certificate Authority (CA).

Deletes an SSH Certificate Authority.

Lists SSH Certificate Authorities (CA).

Creates a new Access group.

Deletes an Access group.

Fetches a single Access group.

Lists all Access groups.

Updates a configured Access group.

Removes one or more targets.

Removes one or more targets.

Adds one or more targets.

Create new target

Delete target

Get target

Lists and sorts an account’s targets. Filters are optional and are ANDed together.

Update target

Gets the Access key rotation settings for an account.

Perfoms a key rotation for an account.

Updates the Access key rotation settings for an account.

Gets a list of Access authentication audit logs for an account.

Lists Access SCIM update logs that maintain a record of updates made to User and Group resources synced to Cloudflare via the System for Cross-domain Identity Management (SCIM).

Creates a new Access reusable policy.

Deletes an Access reusable policy.

Fetches a single Access reusable policy.

Lists Access reusable policies.

Updates a Access reusable policy.

Generates a new service token. Note: This is the only time you can get the Client Secret. If you lose the Client Secret, you will have to rotate the Client Secret or create a new service token.

Deletes a service token.

Fetches a single service token.

Lists all service tokens.

Refreshes the expiration of a service token.

Generates a new Client Secret for a service token and revokes the old one.

Updates a configured service token.

Create a tag

Delete a tag

Get a tag

List tags

Update a tag

Gets a list of users for an account.

Get an active session for a single user.

Get active sessions for a single user.

Get all failed login attempts for a single user.

Get last seen identity for a single user.

Updates the Zero Trust Connectivity Settings for the given account.

Gets the Zero Trust Connectivity Settings for the given account.

Fetches a single WARP device. Not supported when multi-user mode is enabled for the account.

Deprecated: please use one of the following endpoints instead:

• GET /accounts/{account_id}/devices/physical-devices/{device_id}
• GET /accounts/{account_id}/devices/registrations/{registration_id}

List WARP devices. Not supported when multi-user mode is enabled for the account.

Deprecated: please use one of the following endpoints instead:

• GET /accounts/{account_id}/devices/physical-devices
• GET /accounts/{account_id}/devices/registrations

Deletes a WARP device.

Fetches a single WARP device.

Lists WARP devices.

Revokes all WARP registrations associated with the specified device.

Create a DEX test.

Delete a Device DEX test. Returns the remaining device dex tests for the account.

Fetch a single DEX test.

Fetch all DEX tests

Update a DEX test.

Get the live status of a latest device given device_id from the device_state table

Creates a new device managed network.

Deletes a device managed network and fetches a list of the remaining device managed networks for an account.

Fetches details for a single managed network.

Fetches a list of managed networks for an account.

Updates a configured device managed network.

Fetches one-time use admin override codes for a registration. This relies on the Admin Override setting being enabled in your device configuration.

Fetches a one-time use admin override code for a device. This relies on the Admin Override setting being enabled in your device configuration. Not supported when multi-user mode is enabled for the account. Deprecated: please use GET /accounts/{account_id}/devices/registrations/{registration_id}/override_codes instead.

Creates a device settings profile to be applied to certain devices matching the criteria.

Deletes a device settings profile and fetches a list of the remaining profiles for an account.

Updates a configured device settings profile.

Fetches a device settings profile by ID.

Fetches a list of the device settings profiles for an account.

Fetches the list of routes excluded from the WARP client's tunnel for a specific device settings profile.

Sets the list of routes excluded from the WARP client's tunnel for a specific device settings profile.

Fetches the list of domains to bypass Gateway DNS resolution from a specified device settings profile. These domains will use the specified local DNS resolver instead.

Sets the list of domains to bypass Gateway DNS resolution. These domains will use the specified local DNS resolver instead. This will only apply to the specified device settings profile.